Job Summary

As part of the Expleo UK Cybersecurity Practice, you will join a managed Cyber Operations service for a major UK energy network operator that forms part of the UKs Critical National Infrastructure (CNI). The service is governed by Expleo in the UK, with a 24/7 UK Security Operations Centre delivered by a specialist partner and an Expleo consultancy team in India providing design, engineering and assurance expertise across the clients security tooling estate.

As a Security Engineer | Identity , you will provide design, review, and analysis expertise across the clients privileged access management, identity and access management, multi-factor authentication, and PKI controls. This is a design, review and advisory role. You will work within Expleos offshore consultancy team, outside the clients operational environment. You will not have access to the clients operational systems or data and will not make live changes. Operational changes are implemented by UK-based, security-cleared personnel; your work provides the designs, analysis, recommendations and assurance that those changes depend on. You will work from information released to the team through Expleos controlled UK service boundary.

Responsibilities

- Provide subject matter expertise on privileged access management (PAM) architecture, configuration and policy, and recommend improvements.
- Assess PAM change requests for security risk and prepare change designs for implementation by UK-based personnel.
- Design access review approaches and analyse access review, joiner-mover-leaver and MFA allocation reporting released through the UK service boundary.
- Report on the status of PKI, keys and certificates; track expiries and produce renewal plans.
- Support the Senior Security Architect in evaluating PKI and secrets management tooling.
- Maintain PAM, identity and PKI diagrams, policy and configuration documentation.
- Define audit logging requirements for remote access, PAM and PKI in line with the logging design.
- Track PAM platform vendor support status and produce upgrade recommendations.




- Support the growth of Expleos Cybersecurity Practice through knowledge sharing and technical contribution.

Qualifications

- Degree in computer science, cybersecurity or a related discipline, or equivalent qualified experience.
- Vendor PAM certification, e.g. CyberArk Defender or Sentry, BeyondTrust or Delinea (at least one required).
- Microsoft SC-300, CompTIA Security+ or ISC2 SSCP would be advantageous.

Essential Skills

- PAM platform expertise (e.g. CyberArk, BeyondTrust, Delinea).
- Active Directory, Entra ID, conditional access and MFA technologies.
- Enterprise PKI and certificate lifecycle management (e.g. Microsoft AD CS, Venafi, Keyfactor).
- Identity governance and access certification concepts.
- PowerShell scripting, reporting and data analysis.
- ITIL change processes and clear technical documentation.

Desirable Skills and Experience

- Identity governance platforms (e.g. SailPoint, Saviynt).
- HSM concepts and secrets management tooling.
- Energy, utilities or other CNI sector experience.

Experience

- 4-7 years in identity and access management or PAM engineering.
- Experience with PAM policy design, access reviews and certificate lifecycle management in enterprise environments.

What do I need before I apply

- Have the right to work in India.
- Be based in, or willing to relocate to, Chennai.
- Be willing to complete Expleo enhanced pre-employment background screening (equivalent in standard to the UK Baseline Personnel Security Standard) and any additional vetting the client requires.
- Be able to work hours that overlap with the UK business day, with occasional out-of-hours advisory support during major incidents.
- Have excellent written and spoken English, suitable for engagement with senior UK stakeholders.
- Be comfortable working within a strict security boundary, with no access to the clients operational systems or data.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Security Engineer - Identity (Chennai)
🏢 Expleo
📍 Chennai