IAM System Engineer @MMCTech hybrid Cluj Napoca

Join Our Team at Marsh McLennan (MMC) in Cluj, Romania
Marsh McLennan (MMC) has established its EMEA Technology Hub in Cluj, Romania, reflecting our commitment to innovation and excellence; this hub is central to our digital strategy, addressing emerging challenges and enhancing service delivery through advanced technology solutions that empower our clients and promote sustainable growth;

We are seeking a talented
Identity & Access Management (IAM) System Engineer
to join our dynamic team; if you are passionate about security, cloud integrations, and cutting-edge IAM solutions, we want to hear from you

We will count on you to:

• Design, implement, and manage IAM systems and solutions, including SSO, MFA, RBAC, and Privileged Access Management;
• Configure and maintain identity and access management tools such as Active Directory, Entra ID, OKTA, AWS Identity Centre, SailPoint, and Radiant Logic;
• Collaborate with security teams to define and enforce security policies and user access controls;
• Assist in user lifecycle management processes—onboarding, offboarding, and role changes;
• Integrate IAM systems with internal and third-party applications and services;
• Manage backup, recovery, auditing, and reporting for IAM systems to ensure security and compliance;
• Troubleshoot and resolve IAM-related issues, including access problems and authentication failures;
• Stay current with IAM technologies, trends, and security vulnerabilities;
• Develop and maintain documentation for IAM configurations, processes, and procedures;
• Work with security teams to identify and mitigate identity-related risks and vulnerabilities;

What you need to have:

• Extensive experience in designing, developing, and implementing Microsoft Active Directory, including DNS, GPO, Trusts, Schema, PKI, and backup/recovery;
• Proven expertise in Directory Services with cloud platforms such as Entra ID, AWS Identity Centre, OKTA Workforce, and CIAM;
• Strong background in SSO integrations using federation, SAML, OpenID, and risk-based authentication;
• Hands-on experience deploying OKTA WIC and CIC solutions, configuring enterprise SSO, and MFA;
• Knowledge of Privileged Access Management best practices, with experience using CyberArk, Delinea, or Beyond Trust;
• Proficiency in scripting languages such as PowerShell, Python, or JavaScript;
• Deep understanding of PKI, Certificate Services, and Windows OS security configurations;
• Experience with Zero Trust architecture and least privilege access models;
• Familiarity with Radiant Logic, SailPoint, Semperis DSP, and ADFR (nice to have);
• Basic understanding of Unix/Linux OS is a plus;

What makes you stand out:

• Certifications in IAM, security, or cloud platforms;
• Experience working in a global or multi-cloud environment;
• Strong problem-solving skills and a proactive approach to security challenges;
• Excellent communication skills and ability to collaborate across teams;

Why join our team:

• We help you be your best through professional development opportunities, interesting work, and supportive leaders;
• We foster a vibrant and inclusive culture where you can work with talented colleagues to create new solutions and have an impact for colleagues, clients, and communities;
• Our scale enables us to provide a range of career opportunities, as well as benefits and rewards to enhance your well-being;
• A yearly budget and the opportunity to build your flexible benefits package (up to 20% of your annual salary);
• 30+ days off (including legal days, birthday, public holiday replacements, and benefits options);
• Performance bonus scheme;
• Matching charity contributions, charity days off, and the Pay it Forward charity challenge;
• Core benefits: Pension, Life and Medical Insurance, Meal Vouchers, Travel Insurance;

Marsh McLennan (NYSE: MMC) is a global leader in risk, strategy and people, advising clients in 130 countries across four businesses: Marsh, Guy Carpenter, Mercer and Oliver Wyman. With annual revenue of $24 billion and more than 90,000 colleagues, Marsh McLennan helps build the confidence to thrive through the power of perspective. For more information, visit , or follow on LinkedIn and X.

Marsh McLennan is committed to creating a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, disability, ethnic origin, family duties, gender orientation or expression, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh McLennan is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh McLennan colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one "anchor day" per week on which their full team will be together in person.

R_315081