Job Summary

We are seeking a hands-on Identity & Security Operations Engineer to support and improve the firm's enterprise identity, access, and security operations capabilities. This role will sit at the intersection of identity administration, identity governance, directory services, access control, authentication, security operations, and compliance. The ideal candidate has strong operational experience with Saviynt, Microsoft Active Directory, Microsoft Entra ID, privileged access concepts, access governance, and enterprise security controls. This is not a purely governance or policy role. The successful candidate must be comfortable troubleshooting production issues, supporting identity integrations, resolving access and authentication problems, improving operational processes, and partnering with Security, Infrastructure, HRIS, Application, Audit, and Service Desk teams.

This role will be responsible for maintaining reliable identity operations while also helping mature the firm's security posture through stronger access controls, better visibility, automation, lifecycle governance, and secure administration practices.

Key Responsibilities

- Provide day-to-day operational support for the Saviynt Identity Governance and Administration platform.
- Troubleshoot and resolve complex Saviynt issues involving access requests, entitlement visibility, requestability, certifications, provisioning failures, reconciliation errors, job failures, workflow issues, and user lifecycle events.
- Support onboarding and maintenance of applications, entitlements, roles, owners, approval workflows, and access request models within Saviynt.
- Partner with application owners to validate entitlement mappings, access models, role definitions, and provisioning behavior.
- Support joiner, mover, leaver processes across Workday, Saviynt, Active Directory, Entra ID, and downstream applications.
- Monitor scheduled jobs, connectors, feeds, reconciliations, and provisioning tasks to ensure identity data remains accurate and timely.
- Identify recurring operational issues and recommend process, workflow, connector, or data-quality improvements.

Microsoft Identity Administration

- Administer and support Microsoft Active Directory, Microsoft Entra ID, hybrid identity, directory synchronization, groups, service accounts, privileged groups, and access-related directory objects.
- Troubleshoot authentication, authorization, directory replication, group membership, LDAP, Kerberos, DNS-related identity issues, and Entra ID synchronization problems.
- Support identity-related components such as Entra Connect, conditional access dependencies, enterprise applications, SSO integrations, group-based access, and directory-based provisioning.
- Assist with cleanup and rationalization of legacy identity objects, stale accounts, orphaned groups, privileged access paths, service accounts, and over-permissioned access structures.
- Support secure administration practices across Microsoft identity platforms, including administrative role assignments,



privileged group management, break-glass account monitoring, and access reviews.

Security Operations and Access Control

- Partner with Security Operations to investigate identity-related alerts, suspicious sign-ins, access anomalies, risky users, privilege misuse, and potential account compromise events.
- Support enforcement and monitoring of access controls across enterprise platforms, including MFA, Conditional Access, privileged access, least privilege, and separation of duties.
- Assist with security incident response activities where identity data, account access, authentication logs, or entitlement history are required.
- Review identity and access logs to support investigations, audit requests, control validation, and root cause analysis.
- Help improve detection, alerting, and reporting around privileged access, stale access, failed provisioning, unauthorized access changes, and identity lifecycle gaps.
- Support operational controls for high-risk accounts, privileged accounts, service accounts, shared accounts, emergency access accounts, and application administrator access.

Access Governance, Audit, and Compliance

- Support access certification campaigns, entitlement reviews, privileged access reviews, and compliance-driven access validation activities.
- Partner with Audit, Compliance, Risk, and application owners to gather evidence, validate access controls, and remediate access findings.
- Help maintain control documentation for identity lifecycle management, access provisioning, deprovisioning, privileged access, role-based access, and access review processes.
- Investigate and remediate access exceptions, orphaned entitlements, inappropriate access, excessive privileges, and failed deprovisioning events.
- Support control testing for SOX, SOC, internal audit, regulatory examinations, and other compliance requirements.
- Ensure identity operations are performed in accordance with firm policies, security standards, and documented procedures.

Identity Integrations and Application Support

- Support identity integrations between Workday, Saviynt, Active Directory, Entra ID, ServiceNow, and enterprise applications.
- Troubleshoot identity data flow issues, attribute mismatches, provisioning failures, connector errors, group assignment problems, and access synchronization issues.
- Work with application teams to define access models, entitlement structures, approval workflows, provisioning requirements, and access review expectations.
- Assist with onboarding new applications into identity governance, SSO, lifecycle management, or access review processes.
- Support SAML, OIDC, LDAP,



and directory-based access patterns from an operations and troubleshooting perspective.

Automation, Reporting, and Continuous Improvement

- Develop and maintain scripts, reports, queries, dashboards, and operational checks to improve IAM reliability and visibility.
- Use PowerShell, SQL, Python, Saviynt reporting, Entra admin tools, and ITSM data to identify trends, recurring issues, control gaps, and automation opportunities.
- Create repeatable procedures for common IAM operations, access corrections, incident response support, application onboarding, and audit evidence collection.
- Improve documentation, knowledge base articles, runbooks, troubleshooting guides, and handoff materials for IAM and Service Desk teams.
- Participate in change management, incident management, problem management, and post-incident reviews.

Required Qualifications

- 5+ years of experience in Identity and Access Management, identity operations, security operations, directory services, or access administration.
- 3+ years of hands-on experience administering or supporting Saviynt in an enterprise workplace.
- Strong working knowledge of identity governance, access provisioning, access certifications, entitlement management, RBAC, identity lifecycle management, and joiner/mover/leaver processes.
- Strong hands-on experience with Microsoft Active Directory and Microsoft Entra ID.
- Experience troubleshooting authentication, authorization, directory, synchronization, group membership, provisioning, and access-related issues.
- Experience supporting Workday-to-IAM or HR-driven identity lifecycle integrations.
- Understanding of security operations concepts, including account compromise investigation, privileged access monitoring, access anomalies, and identity-related incident response.
- Experience supporting audit, compliance, access reviews, evidence gathering, and control remediation.
- Working knowledge of SSO, SAML, OIDC, LDAP, Kerberos, MFA, Conditional Access, and hybrid identity concepts.
- Strong scripting or reporting experience using PowerShell, SQL, Python, or similar tools.
- Strong analytical, troubleshooting, documentation, and communication skills.
- Ability to work with technical teams, application owners, business stakeholders, auditors, and security teams.

Preferred Qualifications

- Saviynt certification or formal Saviynt training.
- Microsoft identity or security certifications.
- Experience with privileged access management platforms such as CyberArk, Delinea, BeyondTrust, or Microsoft Entra Privileged Identity Management.
- Experience with ServiceNow or another enterprise ITSM platform.
- Experience with Microsoft Defender, Entra ID Protection, Sentinel, Splunk, or other SIEM/security monitoring.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

📌 Sr Associate - Identity & Security Operations Engineer (Hyderabad)
🏢 Oaktree Capital Management
📍 Hyderabad