Role Overview
The Security IAM Engineer owns all identity and access management activity across THE CLIENT, covering application access provisioning and review, support for third-party risk management (TPRM) audits, and technical support to HR-related investigations. The role sits at the intersection of identity operations, compliance and sensitive internal casework.
One position is being established in Mexico.
Key Responsibilities
• Handling all IAM activities across the environment.
• Managing activities related to application access.
• Supporting TPRM (third-party risk management) audits.
• Supporting HR-related investigations.

Required Skills & Experience †
• 5–8 years of experience in identity and access management engineering or operations.
• Strong hands-on Microsoft Entra ID experience: conditional access, MFA, SSO and application registration, privileged identity management, and access reviews.
• Strong Active Directory experience: group and OU design, delegation, group policy, and privileged account management.




• Demonstrated experience running joiner / mover / leaver processes and application access provisioning at scale.
• Experience designing and executing periodic user access reviews and certification campaigns.
• Practical GRC experience, including producing evidence for audits and supporting third-party risk assessments.
• Experience supporting sensitive internal investigations — for example HR or legal matters requiring access history, mailbox or file access forensics — with appropriate discretion and chain-of-custody awareness.
• Understanding of role-based access control (RBAC) and least privilege principles, and the ability to apply them pragmatically in a mixed legacy estate.
• Scripting capability, particularly PowerShell and the Microsoft Graph API, for bulk identity operations and reporting.
• Continuously improve access certification programs across enterprise applications, infrastructure platforms, privileged accounts, service accounts, an

📌 IAM Engineer (Guadalajara)
🏢 Genpact
📍 Guadalajara