Identity Operational Engineer - Level 2

About the role

Emirates' Cybersecurity team protects its digital assets by monitoring threats, responding to incidents, managing vulnerabilities and ensuring compliance with security policies. The Identity Operational Engineer - Level 2 performs advanced monitoring, analysis and investigation of complex security incidents, threats and control issues, guides Level 1 engineers, validates AI- and automation-supported findings and coordinates with escalation specialists.

Key responsibilities

• Guide Level 1 engineers and the decision support system so that diagnosis is correct and approved AI and automation are used effectively.
• Ensure escalated incidents, service requests and control issues are resolved within applicable SLAs.
• Maintain clear, accurate and auditable documentation, operational logs and handovers for complex incidents and control decisions.
• Monitor threat, vulnerability, service-health and control-performance data and initiate proportionate action.
• Analyse cyber threats, incidents, control failures and identity-related risks, validate AI or automation findings and recommend actions.
• Review triage and control handling by Level 1 engineers or approved automation, ensuring accurate closure or escalation.
• Create and maintain operational procedures, automation playbooks, knowledge-base content and approved automation workflows.

Required profile

• Degree or Honours (12+3 or equivalent) in Information Technology.
• 3+ years of experience in identity lifecycle management, authentication, authorisation and access-control principles.
• GIAC Certified Incident Handler (GCIH) or equivalent certification.

Required skills

• Administering, configuring and monitoring enterprise identity and access-management platforms and workflows.
• Knowledge of infrastructure, cloud, endpoint, server, OS and network controls supporting secure identity services.
• Knowledge of directory, database, protocol and web-service concepts for identity records and integrations.
• Practical knowledge of zero-trust, defence-in-depth and operational-resilience principles, including identity queries, basic scripting and approved automation or AI decision-support systems.
• Triage and prioritisation of identity and access requests by risk, urgency and impact, and clear reporting to technical and non-technical stakeholders.

What we offer

• An attractive tax-free salary.
• Travel benefits exclusive to the industry, including discounts on flights and hotel stays worldwide.