Job DescriptionPractice/Department: Enterprise Technology & Operations NPosition Title: Security Engineer, IAM NPosition Location: Remote - US NReports to: Director, Cyber Defense And Threat Intelligence NJob Summary: NThe Security Engineer, Identity & Access Management (IAM), serves within the Office of the CISO as the operational bridge between Security and Internal IT for identity and access governance, remediation tracking, and exception management. This role is responsible for maintaining independent security oversight while driving timely, auditable execution of access governance activities across the organization. The ideal candidate combines hands-on IAM expertise with strong governance discipline, documentation rigor, and the ability to coordinate recurring operational processes such as access reviews, remediation tracking, and risk-based exception handling. NEssential Functions: Nn Serve as the primary liaison between Security and Internal IT for access control, remediation tracking, and security control implementation. N Administer identity andaccess governance activities, including account lifecycle management, entitlement reviews, privileged access reviews, and account cleanup. N Coordinate recurring access review cycles, including monthly, quarterly, and annual certifications, privileged account reviews, role-change validations, inactive account reviews, and exception management processes. N Manage the operational aspects of security exception requests, including intake, documentation, risk assessment support, approval routing, renewals, and status reporting. N Partner with People Operations and Internal IT to reconcile identity data, review orphaned accounts, and drive appropriate deprovisioning activities.



N Support vulnerability remediation governance processes, including issue tracking, escalation, and maintenance of formal exception documentation. N Prepare audit and compliance evidence related to access governance, privileged access management, remediation activities, and exception management programs. N Develop and maintain dashboards, metrics, and reporting to communicate review completion rates, remediation status, exception aging, and ownership accountability. N Collaborate with Security, Internal IT, GRC, application owners, and business stakeholders to advance remediation efforts and governance objectives. NnRequired Skills/Abilities/Competencies: Nn Strong knowledge of identity lifecycle administration, access governance, privileged access management, entitlement governance, and deprovisioning workflows. N Knowledge of enterpriseidentity platforms, directory services, role-based access control (RBAC), and privileged access principles. N Experience coordinatingaccess reviews, resolving account exceptions, and collaborating effectively with technical and non-technical stakeholders. N Solid written and verbal communication skills with the ability to facilitate structured review and approval processes. N Ability to maintain audit-ready documentation and evidence records while working within defined operational processes, SLAs,



and governance frameworks. N Knowledge of formal exception management processes, including approvals, renewals, compensating controls, and risk acceptance procedures. N Familiarity with vulnerability governance, remediation tracking, security metrics, and reporting. N Experience creating dashboards, structured reporting, and metrics to support governance and operational decision-making. N Scripting or automationexperience to support access reviews, remediation tracking, reporting, or evidence collection. N Demonstrated competencies in Identity and Access Management, Access Governance, Privileged Access Management, Exception and Risk Management, Audit Readiness, Stakeholder Coordination, Reporting and Metrics, and Process Improvement. NnEducation and Experience: Nn Bachelor's degreein Computer Science, Information Technology, Cybersecurity, or a related field; or an equivalent combination of education and professional experience. N Minimum of 4–6 years ofexperience in Identity and Access Management, Security Operations, Access Governance, or a closely related security engineering discipline. N Preferred experience supporting formal exception management programs and audit/compliance activities related to access controls and privileged access governance. N Preferred experience with automation, remediation governance, and security operations reporting. N Relevant professional certifications such as Security+, SC-300, CISSP, or comparable security and IAM certifications are preferred. NnPhysical Requirements: Nn Prolonged periodsof sitting at a desk and working on a computer. N Must be able to lift upto 15 pounds at times. N

📌 Security Engineer (Pune)
🏢 Pellera Technologies
📍 Pune