We are seeking a highly skilled IAM & PAM professional with 8-12 years of experience in Identity Governance, Privileged Access Management, and Identity Security. The candidate should possess deep hands-on expertise in Saviynt IGA, BeyondTrust, CyberArk, and Microsoft Entra ID, with proven experience in enterprise-scale deployments, operational management, architecture design, and security governance.

The role is responsible for IAM/PAM operations, managing IAM Center of Excellence (CoE) activities, driving identity transformation initiatives, improving the identity security posture and ensuring audit readiness

Qualification

Bachelor's degree in Computer Science, Information Security, or related field.
Saviynt Certified Engineer / Administrator
CyberArk Defender / Sentry certification
BeyondTrust Certified Professional
Microsoft Certified: Identity and Access Administrator Associate (SC-300)
CIAM, ISO 27001 Lead Implementer / Lead Auditor

Role Summary

8-12 years of overall experience in IAM, IGA, PAM, directory services, or identity security
Hands-on experience in IGA (Saviynt, SailPoint), PAM (BeyondTrust, CyberArk) and Microsoft Entra ID (Azure AD) is required for managing enterprise identity and access solutions.

Key Responsibilities

. Identity Governance & Administration - Saviynt

Design, implement, administer, and support Saviynt Identity Governance solutions.
Configure and manage Joiner-Mover-Leaver (JML) lifecycle processes, birthright access, Role-Based Access Control (RBAC), access requests and approvals, access certifications and campaigns, Segregation of Duties (SoD), and identity analytics.
Develop and maintain Saviynt workflows, rules, connectors, jobs, reports, analytics, and custom integrations.
Lead application onboarding using REST APIs, LDAP, JDBC, SCIM, Active Directory, and custom connectors.
Automate provisioning, modification, de-provisioning, reconciliation, and access review processes.
Support governance, risk, compliance, and audit requirements, including remediation of access-related findings.

2. Privileged Access Management – BeyondTrust, CyberArk

BeyondTrust

Administer Password Safe.
Configure privileged account discovery, onboarding, credential rotation, session monitoring, recording, and reporting.
Integrate BeyondTrust with identity providers, SIEM, ITSM, and enterprise applications.

CyberArk

Design, implement, administer, and support CyberArk PAM solutions.
Manage Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Central Policy Manager (CPM), Privileged Threat Analytics (PTA), and secrets management capabilities.
Onboard privileged, service, database, infrastructure, and application accounts.
Implement password rotation, credential reconciliation, session isolation, recording, and privileged access workflows.
Perform platform health checks, upgrades, patching, backup validation, disaster recovery testing, and capacity planning.

3. Microsoft Entra ID & Identity Security

Design, administer, and support enterprise Microsoft Entra ID environments.
Implement and manage Conditional Access, multifactor authentication, passwordless authentication, Windows Hello for Business, Temporary Access Pass, Identity Protection, Privileged Identity Management, Entitlement Management, Access Reviews, and B2B collaboration.
Configure enterprise application integrations using SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, and federation services.
Develop automation using Microsoft Graph API, PowerShell, Azure Automation, and Logic Apps.
Troubleshoot authentication, authorization, federation, token, provisioning, and Conditional Access issues.

Operational Activities - Run & Support

Operations Activities

Monitor scheduled jobs, workflows, connectors, reconciliations, provisioning queues, certification campaigns, vault operations, session services, and platform alerts.
Investigate and resolve access request, provisioning, authentication, SSO, federation, Conditional Access, password rotation, vaulting, and privileged session issues.
Perform privileged account, service account, and application secret onboarding and lifecycle support.
Handle incidents, service requests, problem records, change requests, and escalations within agreed service levels.
Review privileged activity, anomalous access, failed logins, policy violations, and high-risk events in coordination with SOC and incident response teams.

Platform Administration

Monitor infrastructure and application health, availability, capacity, performance, certificates, licenses, integrations, and dependencies.
Maintain connectors, agents, gateways, APIs, directory integrations, service accounts, and scheduled tasks.
Plan and execute patches, upgrades, hotfixes, configuration changes, backup validation, restoration tests, and disaster recovery drills.
Maintain platform documentation, configuration baselines, standard operating procedures, architecture diagrams, and support runbooks.
Perform periodic access reviews for platform administrators and validate break-glass and emergency access controls.

IAM Professionals aligned with our ongoing initiatives around IAM transformation, Zero Trust, and enterprise access governance. can reach me at [HIDDEN TEXT] OR 9898791075.

Identity Management Consultant