Key Responsibilities

- Plan, design and deliver IDAM training sessions with hands-on labs and assessments

- Teach directory architecture and configuration, including identity stores and directory services (Active Directory, LDAP/OpenLDAP and Microsoft Entra ID), group lifecycle and directory policy management

- Cover identity lifecycle operations, including user lifecycle management, joiner-mover-leaver processes, identity provisioning and deprovisioning, access requests, entitlement management and service-account lifecycle management

- Teach Identity Governance &
- Administration (IGA) operations and compliance, including access reviews and recertification, identity certification, SoD rules and access governance, identity audits, entitlement and role lifecycle management, and compliance reporting

- Train learners on Access Management, including SSO, CIAM, and authentication and MFA

- Cover identity federation and cross-domain authentication using SAML, OAuth 2.0 and OpenID Connect (OIDC), including integration between cloud and on-premises identities

- Demonstrate advanced authentication, including password-based, biometric and certificate-based authentication, step-up authentication and password rotation controls

- Teach advanced access control, including DAC, MAC, RBAC, ABAC, risk-based and policy-based access control, enforcement of least privilege, and the architecture of policy-based access control (PDP/policy engine and PEP/API gateway)

- Demonstrate Privileged Access Management (PAM) and secrets management, including credential vaulting and rotation, privileged account discovery, Just-in-Time (JIT) access, service-account governance, monitoring and auditing

- Cover IAM implementation across AWS, Azure and Google Cloud,



including multi-tier applications and integration with enterprise platforms such as Salesforce, SAP and Microsoft 365

- Cover access logging and monitoring, and identity analytics and reporting

- Build, maintain and deliver hands-on implementation labs, case studies and assessments, including virtual environment setup, directory-server configuration, SSO implementation, MFA testing, access-policy configuration, access reviews, PAM tool configuration and identity federation

- Track batch attendance, performance and feedback, and resolve learner doubts

- Coordinate with internal teams to complete schedules on time

Required Skills

- Identity Governance:

IGA, user lifecycle management, provisioning, identity certification, SoD and access governance; practical experience with IGA platforms such as SailPoint or Saviynt, and configuring identity provisioning, access certification and SoD controls

- Access Management:

SSO, CIAM, MFA, RBAC; practical understanding of SAML, OAuth 2.0, OpenID Connect and identity federation

- Directory Services:

Active Directory, LDAP/OpenLDAP, Microsoft Entra ID (Azure AD)

- Policy &
- Enforcement:

PDP/policy engine, PEP/API gateway;

experience configuring access-control policies

- Privileged Access &

- Secrets:

PAM, secrets management; hands-on experience with PAM platforms such as CyberArk, Delinea or BeyondTrust, and tools such as HashiCorp Vault

- Cloud &

- Enterprise IAM:

cloud and hybrid IAM, service accounts, privileged identities and enterprise application integration

- Monitoring &

- Analytics:

access logging and monitoring, identity analytics and reporting

- Lab Delivery:

ability to configure IAM tools and deliver practical labs, not just explain theoretical concepts

- Robust communication, presentation and facilitation skills

📌 Instructor - IDAM (Bhubaneswar)
🏢 GRAMAX
📍 Bhubaneswar