We are seeking a highly skilled IAM & PAM professional with 8-12 years of experience in Identity Governance, Privileged Access Management, and Identity Security. The candidate should possess deep hands-on expertise in Saviynt IGA, BeyondTrust, CyberArk, and Microsoft Entra ID, with proven experience in enterprise-scale deployments, operational management, architecture design, and security governance.

The role is responsible for IAM/PAM operations, managing IAM Center of Excellence (CoE) activities, driving identity transformation initiatives, improving the identity security posture and ensuring audit readiness

Qualification

- Bachelor's degree in Computer Science, Information Security, or related field.
- Saviynt Certified Engineer / Administrator
- CyberArk Defender / Sentry certification
- BeyondTrust Certified Professional
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- CIAM, ISO 27001 Lead Implementer / Lead Auditor

Role Summary

- 8-12 years of overall experience in IAM, IGA, PAM, directory services, or identity security
- Hands-on experience in IGA (Saviynt, SailPoint), PAM (BeyondTrust, CyberArk) and Microsoft Entra ID (Azure AD) is required for managing enterprise identity and access solutions.

Key Responsibilities

. Identity Governance & Administration - Saviynt

- Design, implement, administer, and support Saviynt Identity Governance solutions.
- Configure and manage Joiner-Mover-Leaver (JML) lifecycle processes, birthright access, Role-Based Access Control (RBAC), access requests and approvals, access certifications and campaigns, Segregation of Duties (SoD), and identity analytics.
- Develop and maintain Saviynt workflows, rules, connectors, jobs, reports, analytics, and custom integrations.
- Lead application onboarding using REST APIs, LDAP, JDBC, SCIM, Active Directory, and custom connectors.
- Automate provisioning, modification, de-provisioning, reconciliation,



and access review processes.
- Support governance, risk, compliance, and audit requirements, including remediation of access-related findings.

2. Privileged Access Management – BeyondTrust, CyberArk

BeyondTrust

- Administer Password Secure.
- Configure privileged account discovery, onboarding, credential rotation, session monitoring, recording, and reporting.
- Integrate BeyondTrust with identity providers, SIEM, ITSM, and enterprise applications.

CyberArk

- Design, implement, administer, and support CyberArk PAM solutions.
- Manage Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Central Policy Manager (CPM), Privileged Threat Analytics (PTA), and secrets management capabilities.
- Onboard privileged, service, database, infrastructure, and application accounts.
- Implement password rotation, credential reconciliation, session isolation, recording, and privileged access workflows.
- Perform platform health checks, upgrades, patching, backup validation, disaster recovery testing, and capacity planning.

3. Microsoft Entra ID & Identity Security

- Design, administer, and support enterprise Microsoft Entra ID environments.
- Implement and manage Conditional Access, multifactor authentication, passwordless authentication, Windows Hello for Business, Temporary Access Pass, Identity Protection, Privileged Identity Management, Entitlement Management, Access Reviews, and B2B collaboration.
- Configure enterprise application integrations using SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, and federation services.




- Develop automation using Microsoft Graph API, PowerShell, Azure Automation, and Logic Apps.
- Troubleshoot authentication, authorization, federation, token, provisioning, and Conditional Access issues.

Operational Activities - Run & Support

Operations Activities

- Monitor scheduled jobs, workflows, connectors, reconciliations, provisioning queues, certification campaigns, vault operations, session services, and platform alerts.
- Investigate and resolve access request, provisioning, authentication, SSO, federation, Conditional Access, password rotation, vaulting, and privileged session issues.
- Perform privileged account, service account, and application secret onboarding and lifecycle support.
- Handle incidents, service requests, problem records, change requests, and escalations within agreed service levels.
- Review privileged activity, anomalous access, failed logins, policy violations, and high-risk events in coordination with SOC and incident response teams.

Platform Administration
- Monitor infrastructure and application health, availability, capacity, performance, certificates, licenses, integrations, and dependencies.
- Maintain connectors, agents, gateways, APIs, directory integrations, service accounts, and scheduled tasks.
- Plan and execute patches, upgrades, hotfixes, configuration changes, backup validation, restoration tests, and disaster recovery drills.
- Maintain platform documentation, configuration baselines, standard operating procedures, architecture diagrams, and support runbooks.
- Perform periodic access reviews for platform administrators and validate break-glass and emergency access controls.

IAM Professionals aligned with our ongoing initiatives around IAM transformation, Zero Trust, and enterprise access governance. can reach me at [email protected] OR (phone hidden).

📌 Identity Management Consultant (Ahmedabad)
🏢 Adani Enterprises
📍 Ahmedabad