We are looking for an experienced SME – Infrastructure & Security Access Management to manage the governance, execution and control effectiveness of identity, privileged and infrastructure-access management across the Bank’s IT landscape.

Key Responsibilities

- Define and maintain the operational roadmap for infrastructure access controls, privileged access management and security-access governance.
- Translate regulatory, audit and internal-policy requirements into operating procedures, control checkpoints and measurable SLAs.
- Administer and govern access across Active Directory, Entra ID/Azure AD, Linux/Unix, Windows servers, databases, network devices, cloud platforms and security tools.
- Manage the complete access lifecycle covering joiners, movers, leavers, transfers, temporary access and emergency or break-glass access.
- Govern privileged IDs, shared IDs, service accounts, admin groups, access owners and role mappings.
- Implement least privilege, need-to-know, role-based access control, segregation of duties, maker-checker and time-bound access principles.
- Conduct periodic access reviews, privileged-access certifications and dormant or orphan ID clean-up.
- Manage PAM activities covering password vaulting, credential rotation, session monitoring, reconciliation and exception reporting.
- Review privileged-access logs and coordinate with SOC teams to investigate anomalous or unauthorised activity.
- Develop and maintain SOPs, runbooks, checklists and audit-evidence templates.
- Support ITGC, PCI DSS, ISO 27001, regulatory, statutory and internal audit reviews.
- Track access exceptions,



policy deviations and audit observations through closure.
- Participate in incident response, forensic investigations and BCP/DR exercises involving identity or privileged access.
- Drive automation of access workflows, recertification dashboards, SoD monitoring and access analytics.
- Manage IAM/PAM vendors, OEMs, implementation partners and service providers.
- Prepare management MIS on access requests, SLA adherence, access reviews, audit findings and remediation ageing.

Desired Candidate Profile

- BE, B.Tech., B.Sc., BCA, MCA, M.Sc. IT, Computer Science, Cyber Security or an equivalent qualification.
- 10–15 years of relevant experience in infrastructure security, IAM, PAM, security operations or IT access governance.
- Hands-on experience with Active Directory, Entra ID/Azure AD, LDAP, RBAC, SAML, OAuth, Kerberos and MFA.
- Solid working knowledge of PAM tools, Identity Governance and Administration platforms, Windows/Linux administration and cloud IAM.
- Experience governing access to databases, network devices, security tools and critical infrastructure platforms.
- Sound understanding of Zero Trust, segregation of duties, privileged-session monitoring and malware-resistant MFA.
- Strong knowledge of access recertification, audit-evidence management and regulatory controls.
- Excellent analytical, decision-making and problem-solving capabilities.
- Strong stakeholder management, documentation discipline and ownership mindset.
- Preferred certifications include Microsoft SC-300/SC-100, Azure Administrator, CyberArk, ARCON, SailPoint, Saviynt, Oracle IAM, CISSP, CISM, ISO 27001 Lead Auditor/Implementer and ITIL Foundation.

📌 SME – Infrastructure & Security Access Management (Bengaluru)
🏢 Ujjivan Small Finance Bank
📍 Bengaluru