Description
Role Summary:
We are looking for a skilled Active Directory (AD) and Tier-0 ILM specialist to own and improve identity lifecycle processes for privileged and high-impact identities in a complex enterprise workplace. This role will focus on secure Joiner–Mover–Leaver (JML) operations, Tier-0 account governance, privileged group control, and automation-driven compliance to strengthen security posture, reduce operational risks, and ensure audit readiness.
The candidate will partner with IAM, Cybersecurity, GRC, and infrastructure teams to implement least privilege, solid approval controls, access reviews, and standardized workflows across Tier-0 environments.

Responsibilities
Key Responsibilities
1) Tier-0 Identity Lifecycle Management (ILM / JML)
Own end-to-end Joiner–Mover–Leaver (JML) lifecycle for Tier-0 / privileged identities, including:
Admin account provisioning, modifications, de-provisioning
Role-based access changes based on org movement or job changes
Emergency access workflows with strict governance




Implement and maintain time-bound access and just-in-time principles where feasible.
Ensure lifecycle controls cover:
Identity proofing, approvals, segregation of duties (SoD)
Re-certification and removal of stale/unused privileges
Consistent naming standards & lifecycle tagging for privileged accounts

2) Privileged Access Governance (Tier-0 Focus)
Manage and govern Tier-0 AD groups and delegated rights, including:
Domain Admins, Enterprise Admins, Schema Admins, built-in privileged groups
GPO delegated permissions, OU ACLs, admin role delegation
Drive least privilege and role engineering for Tier-0 operations:
Convert “broad admin” models into role-based admin groups
Reduce permanent membership and enforce approvals/expiry
Own privileged identity hygiene:
Remove orphaned accounts, stale memberships, excessive ACLs
Identify and remediate privilege escalation paths

3) Automation & Workflow Enablement
Build

📌 Dtici Iam Activedirectory Bengaluru
🏢 Daimler Truck
📍 Bengaluru