ABOUT THE PRACTICE

Olive Intelligence (OI) is building an independent, advisory-first cybersecurity, privacy, and responsible AI practice serving CISOs and senior executives across Indian enterprises — anchored to live regulatory mandates including the DPDP Act & Rules, SEBI CSCRF, RBI IT Governance and outsourcing directions, and CERT-In norms. We are product-independent by design: we assess, design, and advise — with recommendations anchored to risk and regulation.

ROLE OVERVIEW

You will lead identity governance and access management engagements — from IAM maturity assessment and roadmap through IGA/SSO implementation — for clients facing RBI, SEBI CSCRF, and DPDP-driven identity mandates. Identity is the control plane of Zero Trust; this role anchors that pillar of our practice.

KEY RESPONSIBILITIES

▪ IAM strategy & assessment — Assess client identity landscapes (workforce, privileged, machine/workload identities); define target-state architecture, roadmap, and business case.

▪ IGA delivery — Implement identity governance — joiner/mover/leaver lifecycle, access certification campaigns, SoD policy, role mining and RBAC design, and application onboarding.

▪ Access management — Deploy SSO, adaptive MFA, and conditional access; federate across SaaS and on-prem estates; design passwordless and phishing-resistant authentication journeys.

▪ Regulatory alignment — Map IAM controls to RBI IT Governance, SEBI CSCRF identity requirements, DPDP access-control safeguards, and supervisory expectations; deliver assessment-ready evidence.

▪ Client advisory — Advise CISOs on IAM tooling strategy, PAM adjacency,



and Zero Trust sequencing — product-independent and regulator-anchored.

MUST-HAVE: TOOLS & PLATFORMS

▪ SailPoint (IdentityIQ or Identity Security Cloud/IdentityNow) — connector configuration, lifecycle workflows, certifications, and role modelling; or

▪ Okta — Universal Directory, SSO/OIDC/SAML federation, adaptive MFA, Workflows, and Okta Identity Governance; or

▪ Ping Identity (PingFederate, PingOne, PingAccess) — federation architecture, policy design, and API access management.

▪ Depth in at least one of the above is mandatory; working familiarity with a second platform is a strong advantage.

MUST-HAVE: EXPERIENCE & KNOWLEDGE

▪ 5+ years in IAM consulting or engineering, with at least two end-to-end IGA or access management implementations.

▪ Strong grasp of identity protocols and patterns — SAML, OIDC/OAuth 2.0, SCIM, LDAP/AD, and RBAC/ABAC design.

▪ Understanding of privileged access management concepts and how PAM (CyberArk, BeyondTrust, Delinea) integrates with IGA.

VALUABLE TO HAVE

▪ Platform certifications (SailPoint Certified Professional, Okta Certified Consultant/Administrator, Ping certifications).

▪ Exposure to workload identity and Zero Trust architectures — service accounts, secrets management, and machine identity at data-center/cloud scale.

▪ BFSI delivery experience and familiarity with RBI/SEBI supervisory interactions.

Pay: ₹600,000.00 - ₹2,000,000.00 per year

Experience:

- Identity & access management: 4 years (Preferred)

Work Location: Hybrid remote in Hyderabad, Telangana (Hyderabad, Hyderabad District)

📌 Senior Consultant — Identity & Access Management (India)
🏢 Olive Intelligence
📍 India