Operational Security Access Administrator

We are looking for a detail-oriented and experienced Support Analyst to join our team, focusing on Identity & Access Management (IAM) and Privileged Access Management (PAM). You will be responsible for managing technical access matrices, handling account and role lifecycle, supporting application security testing, and administering privileged access systems to ensure security and operational efficiency.

Main Responsibilities:

Technical Access Matrix Administration

• Create, modify, and delete access and entitlement matrices.
• Design and implement technical access matrices for IT Operations, integrating with enterprise tools such as Dynatrace, Venafi, and ZPA (Zscaler Private Access).
• Ensure consistency, integrity, and adherence to the principle of least privilege across all access matrices.

Account & Role Lifecycle Management

• Provision, modify, and delete personal, application, technical, and training accounts.
• Handle user authentication requests and password resets.
• Assign and revoke accounts associated with application and functional roles.
• Manage specialized delegation assignments (e.g., RFH / FAM roles).

Application Security Support

• Configure and initiate Dynamic Application Security Testing (DAST) scans.
• Maintain scan hygiene by deleting obsolete or decommissioned DAST scan configurations.

Privileged Access & System Administration

• Manage Host and Sudo roles: add/remove hosts/servers on the PAUL platform and assign them to appropriate families.
• Create, update, and remove Sudo roles and privilege elevation configurations for platforms and network access (e.g., Infoblox Access).
• Oversee the lifecycle of service accounts including creation, updates, deletion, and credential/password rotations.
• Perform standard and specialized account cleanups (e.g., HCAP accounts).

Profile we are looking for:

• Experienced end-user Support Analyst with strong interpersonal skills
• Rigorous and detail-oriented
• English language proficiency at B2-C1 level

Technical Skills:

• Strong understanding of IAM principles and Role-Based Access Control (RBAC)
• Familiarity with Linux/Unix environments and basics of Privileged Access Management (PAM)
• Basic knowledge of application security testing including DAST scans and network flow concepts
• Experience with ITIL processes and IT Service Management tools such as Atlassian JIRA

Interpersonal Skills:

• High attention to detail to avoid security risks and operational disruptions
• Customer service oriented with ability to manage ticket queues respecting SLAs
• Analytical mindset able to review and challenge access requests maintaining security compliance
• Good verbal and written communication skills in English; French language skills are a plus

At Thales, we’re committed to fostering a workplace where respect, trust, collaboration, and passion drive everything we do. Here, you’ll feel empowered to bring your best self, thrive in a supportive culture, and love the work you do. Join us, and be part of a team reimagining technology to create solutions that truly make a difference – for a safer, greener, and more inclusive world.

Thales is a global technology leader trusted by governments, institutions, and enterprises to tackle their most demanding challenges. From quantum applications and artificial intelligence to cybersecurity and 6G innovation, our solutions empower critical decisions rooted in human intelligence. Operating at the forefront of defence and security, aerospace and space, cybersecurity and digital identity, we’re driven by a mission to build a future we can all trust.

In Romania, we are advancing innovation through software engineering, research and development, delivering solutions in key markets in which Thales Group operates. Our engineers design, develop and integrate solutions that impact global industries – from fully operational systems and subsystems for naval warfare and maritime security operations, to air traffic management systems, satellite-based solutions, tactical indoor simulations, identity and biometric technologies and more.