Role & responsibilities
Manage end-to-end Identity and Access Management (IAM) processes including Joiner-Mover-Leaver (JML) lifecycle.
Design, implement, and support user provisioning/de-provisioning workflows.
Implement and maintain Role-Based Access Control (RBAC) models.
Perform access certification reviews, entitlement governance, and segregation of duties (SoD) analysis.
Manage end-to-end Application Onboarding into the IAM platform, including defining access models, configuring role-based provisioning, and establishing authentication standards.
Manage and troubleshoot SSO, MFA, SAML, OAuth 2.0, OpenID Connect, and LDAP integrations.
Support Privileged Access Management (PAM) solutions and privileged account governance.
Govern and manage Non-Human Identities (NHIs) including service accounts, API keys, bots, and machine credentials, ensuring proper lifecycle management, least-privilege access, and periodic attestation to reduce security risk.
Design, configure, and maintain IAM connectors (including SC2 and REST-based connectors) to enable automated provisioning, deprovisioning, and reconciliation between the identity governance platform and target applications or directories
Conduct access reviews, audits, and compliance assessments.
Collaborate with security, application, infrastructure,



and business teams to define access requirements.
Analyze security risks and implement appropriate identity controls.
Develop IAM reports, dashboards, and metrics for audit and compliance purposes.
Participate in incident management, problem management, and change management activities.
Create and maintain technical documentation, SOPs, and knowledge articles.

Preferred candidate profile
Solid experience with one or more IAM platforms:
Saviynt
SailPoint IdentityIQ / IdentityNow
Azure AD / Microsoft Entra ID

Authentication & Authorization
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
SAML
OAuth 2.0
OpenID Connect
LDAP / Active Directory

Access Governance
User Access Management
Role Management
Access Certification
RBAC
SoD Controls
Identity Governance & Administration (IGA)

Security & Compliance
ISO 27001
NIST
SOX
GDPR
ITGC Controls

Preferred Skills
Experience with CyberArk or other PAM tools.
Knowledge of cloud security, Azure/AWS IAM services.
Experience in automation using PowerShell, Python, or REST APIs.
Familiarity with ServiceNow integration and ticket workflows.
Understanding of Zero Trust security principles.

📌 Identity & Access Management Testing Engineer Hyderabad
🏢 Infosys
📍 Hyderabad