Role & responsibilities

- Manage end-to-end Identity and Access Management (IAM) processes including Joiner-Mover-Leaver (JML) lifecycle.
- Design, implement, and support user provisioning/de-provisioning workflows.
- Implement and maintain Role-Based Access Control (RBAC) models.
- Perform access certification reviews, entitlement governance, and segregation of duties (SoD) analysis.
- Manage end-to-end Application Onboarding into the IAM platform, including defining access models, configuring role-based provisioning, and establishing authentication standards.
- Manage and troubleshoot SSO, MFA, SAML, OAuth 2.0, OpenID Connect, and LDAP integrations.
- Support Privileged Access Management (PAM) solutions and privileged account governance.
- Govern and manage Non-Human Identities (NHIs) including service accounts, API keys, bots, and machine credentials, ensuring proper lifecycle management, least-privilege access, and periodic attestation to reduce security risk.
- Design, configure, and maintain IAM connectors (including SC2 and REST-based connectors) to enable automated provisioning, deprovisioning, and reconciliation between the identity governance platform and target applications or directories
- Conduct access reviews, audits, and compliance assessments.
- Collaborate with security, application, infrastructure,



and business teams to define access requirements.
- Analyze security risks and implement appropriate identity controls.
- Develop IAM reports, dashboards, and metrics for audit and compliance purposes.
- Participate in incident management, problem management, and change management activities.
- Create and maintain technical documentation, SOPs, and knowledge articles.

Preferred candidate profile

- Solid experience with one or more IAM platforms:
- Saviynt
- SailPoint IdentityIQ / IdentityNow
- Azure AD / Microsoft Entra ID

Authentication & Authorization

- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- SAML
- OAuth 2.0
- OpenID Connect
- LDAP / Active Directory

Access Governance

- User Access Management
- Role Management
- Access Certification
- RBAC
- SoD Controls
- Identity Governance & Administration (IGA)

Security & Compliance

- ISO 27001
- NIST
- SOX
- GDPR
- ITGC Controls

Preferred Skills

- Experience with CyberArk or other PAM tools.
- Knowledge of cloud security, Azure/AWS IAM services.
- Experience in automation using PowerShell, Python, or REST APIs.
- Familiarity with ServiceNow integration and ticket workflows.
- Understanding of Zero Trust security principles.

📌 Identity & Access Management - Testing Engineer (Hyderabad)
🏢 Infosys
📍 Hyderabad