The IAM/PAM Specialist will be responsible for designing, implementing, and managing enterprise Identity and Access Management (IAM) and Privileged Access Management (PAM) solutions across hybrid and multi-cloud environments. This role will focus on securing both user and privileged accounts, enforcing least privilege policies, integrating IAM/PAM platforms, and ensuring compliance with security governance frameworks and regulatory requirements. The ideal candidate will have deep hands-on expertise with CyberArk, HashiCorp Vault, SailPoint IdentityNow , and cloud IAM services in AWS or Azure .
Key Responsibilities
Identity and Access Management (IAM)
Manage the identity lifecycle: provisioning, modifying, and de-provisioning users, roles, and groups.
Implement identity federation across Active Directory (AD) , LDAP , Azure AD , and third-party SaaS platforms.
Deploy authentication solutions including MFA, SSO (SAML, OIDC) , and passwordless authentication.
Apply and maintain Role-Based Access Control (RBAC) policies.
Configure and manage cloud IAM services (either one) :
AWS: IAM roles, JSON policies, SCPs, Identity Center (SSO), resource-based and identity-based policies.
Azure: Azure AD, Conditional Access, PIM, and Identity Governance.
Support and manage IGA solutions such as SailPoint IdentityNow, including certifications, access reviews, and policy enforcement.
Privileged Access Management (PAM)
Design, implement, and manage PAM solutions to secure and monitor privileged accounts.
Manage and configure CyberArk components (Vault, PVWA, PSM, CPM, EPM).
Administer and automate secret management with HashiCorp Vault .
Manage Azure privileged access using Entra PIM and Conditional Access.
Oversee AWS privileged access, including IAM roles, Secrets Manager, and SCP enforcement.
Integrate PAM platforms including SailPoint, ForgeRock, CyberArk .
Perform periodic audits, access reviews, and compliance reporting.
Desired Skills
PAM Tools: CyberArk, HashiCorp Vault.
IAM Tools: SailPoint IdentityNow, Microsoft Entra, AWS IAM.
Integration Skills: API-based and directory-based integrations with IAM/PAM.
Knowledge of compliance frameworks (SOX, GDPR, ISO 27001, NIST).
Good to Have Skills
Knowledge of Zero Trust Architecture.
Experience with DevSecOps and CI/CD integrations for IAM/PAM.
Familiarity with AI/ML-based identity analytics.
Experience in hybrid cloud and multi-cloud identity management.
Total Experience Expected: 08-10 years
Job Classification
Industry: IT Services & ConsultingFunctional Area / Department: IT & Information SecurityRole Category: IT Infrastructure ServicesRole: IT Operations ManagementEmployement Type: Full time