Role & Responsibilities:

- Design, implement, and support Identity and Access Management (IAM) solutions for enterprise environments.

- Gather business and security requirements and translate them into IAM technical solutions.

- Configure and customize IAM platforms such as SailPoint, Saviynt, CyberArk, Okta, Microsoft Entra ID, Ping Identity, or ForgeRock.

- Develop and manage:

1. User lifecycle management (Joiner-Mover-Leaver processes)

2. Access provisioning and de-provisioning workflows

3. Role-Based Access Control (RBAC)

4. Access certification and review processes

5. Privileged Access Management (PAM)

6. Single Sign-On (SSO) and Multi-Factor Authentication (MFA)

- Integrate IAM platforms with enterprise applications, directories, databases, and cloud platforms.

- Perform IAM architecture design, solution documentation, and implementation planning.

- Develop workflows, rules, connectors, scripts, and automation for IAM processes.

- Conduct access governance activities including:

1. Segregation of Duties (SoD) analysis

2. Compliance reporting

3. Audit support

4. Policy enforcement

- Troubleshoot IAM incidents and provide production support.

- Collaborate with cybersecurity, infrastructure, application, and compliance teams.

- Support IAM assessments, gap analysis, and roadmap development.

- Prepare technical documentation, SOPs, and operational guidelines.

- Stay updated with IAM security trends, regulatory requirements, and industry best practices.

Preferred Candidate Profile:

Experience & Technical Skills:

- 510 years of hands-on experience in Identity and Access Management (IAM).

- Strong experience implementing and managing IAM solutions in large enterprise environments.

- Experience with one or more IAM platforms:

1. SailPoint IdentityIQ / IdentityNow

2. Saviynt Enterprise Identity Cloud

3. CyberArk PAM

4. Okta Identity Cloud

5. Microsoft Entra ID (Azure AD)

6. Ping Identity

7. ForgeRock

- Strong understanding of:

1. Identity governance and administration (IGA)

2. Access management

3. Privileged access management (PAM)

4. Authentication and authorization concepts

5. OAuth 2.0, SAML, OpenID Connect, LDAP, Active Directory

6. Cloud IAM (Azure/AWS/GCP)

Professional Skills:

- Strong analytical and problem-solving abilities.

- Ability to communicate with technical teams, business stakeholders, and auditors.

- Experience working in consulting environments with multiple clients/projects.

- Ability to create architecture documents, solution designs, and technical reports.

- Good understanding of cybersecurity frameworks and compliance requirements.

Preferred Certifications:

- International Information System Security Certification Consortium (ISC) CISSP

- Information Systems Audit and Control Association (ISACA) CISM

- SailPoint Certified IdentityIQ Engineer / IdentityNow certifications

- CyberArk Certified Defender / Sentry

- Microsoft Certified: Identity and Access Administrator Associate

- Okta Certified Professional / Administrator

- Certified Cloud Security Professional (CCSP)

Education:

- Bachelors degree in Computer Science, Information Technology, Cybersecurity, or related discipline.

- Relevant professional certifications preferred.