Role & Responsibilities :

- Lead the design, implementation, and administration of Identity and Access Management (IAM) solutions across the organization.

- Own IAM strategy covering Identity Governance & Administration (IGA), Access Management, Privileged Access Management (PAM), SSO, MFA, and lifecycle management.

- Manage the complete JoinerMoverLeaver (JML) process and ensure timely provisioning, modification, and deprovisioning of user access.

- Define and implement Role-Based Access Control (RBAC), access policies, segregation of duties (SoD), and least-privilege principles.

- Lead access certification, access reviews, entitlement management, and periodic recertification processes.

- Integrate IAM platforms with enterprise applications, directories, databases, cloud platforms, APIs, and third-party systems.

- Work with platforms such as Microsoft Entra ID/Azure AD, Okta, SailPoint, CyberArk, Ping Identity, or equivalent IAM technologies.

- Manage and improve SSO, MFA, federation protocols (SAML/OAuth/OIDC), LDAP/Active Directory, and identity synchronization.

- Partner with Cybersecurity, Infrastructure, Cloud, Application, HR, and Audit teams to establish effective identity controls.

- Lead IAM-related security audits, compliance requirements, risk assessments, and remediation activities.

- Develop IAM architecture, standards, processes, documentation, and operational procedures.

- Monitor IAM environments, troubleshoot access-related incidents, and drive root-cause analysis and permanent resolution.

- Identify opportunities for IAM automation using workflows, APIs, scripts, and integration tools.

Preferred Candidate Profile :

- 7 - 12 years of overall IT/cybersecurity experience, with significant hands-on experience in IAM.

- Proven experience leading IAM implementations, operations, migrations, or transformation projects.

- Good understanding of AWS/Azure/GCP IAM and cloud identity security.

- Experience implementing RBAC, SoD controls, least privilege, privileged access, and access review/certification.

- Familiarity with Zero Trust architecture and modern identity-security practices.

- Strong understanding of cybersecurity frameworks and compliance requirements such as ISO 27001, SOC 2, GDPR, SOX, or applicable regulatory standards.

- Experience with IAM automation, scripting, APIs, workflow tools, and DevOps practices is highly desirable.

- Strong analytical, problem-solving, communication, stakeholder-management, and leadership skills.

- Ability to translate business/security requirements into scalable IAM solutions.

- Experience managing or mentoring IAM team members and working with cross-functional/global teams.

- Relevant certifications such as CISSP, CISM, SailPoint, Okta, CyberArk, Microsoft, or AWS/Azure security certifications would be an advantage.

- Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline preferred.