Tech Lead - IAMKey Responsibilities :- Own the technical design of identity discovery and access intelligence solutions, establishing how identity data is collected, correlated, and analyzed across Active Directory, Microsoft Entra ID, AWS, GCP, and OCI.- Develop advanced Python and PowerShell solutions to correlate identities across platforms, resolve duplicate or inconsistent records, map identity relationships, and establish a consolidated identity inventory.- Design automated entitlement analysis mechanisms to evaluate effective permissions, nested group memberships, inherited access, cross-account roles, service identities, and privileged access paths.- Build logic to identify toxic access combinations, excessive privileges, inactive entitlements, orphaned identities, unmanaged service accounts, and deviations from least-privilege principles.- Develop connectors and integration components using Microsoft Graph API, AWS SDK/boto3, Google Cloud APIs and CLI, and OCI APIs and CLI, handling pagination, rate limits, failures, authentication, and data consistency.- Engineer data pipelines that transform raw identity and permission data into normalized entitlement models suitable for access analytics, PAM onboarding, and governance assessments.- Define technical approaches for privileged identity classification, account criticality assessment, access tiering, and prioritization of accounts for PAM onboarding.- Convert identity analysis findings into technical specifications for privileged access controls, role redesign, access profiles, service account governance, and remediation workflows.- Design automated validation mechanisms to assess whether proposed access changes align with role definitions, security policies, and least-privilege requirements.- Optimize identity processing for large datasets through efficient querying, incremental data collection, parallel processing,



and performance tuning.- Establish automated testing and data quality controls to validate connector accuracy, entitlement mappings, identity correlation, and risk detection results.- Lead technical investigations into complex identity and authorization issues, including permission inheritance, cross-cloud trust relationships, inconsistent access records, and unexpected privilege exposure.- Work with security architects, PAM specialists, cloud engineering teams, and governance stakeholders to validate technical findings and convert them into implementable security requirements.- Define reusable engineering patterns, technical documentation, and code quality standards while reviewing complex implementations and mentoring engineers.Required Technical Skills :- 10 - 13 years of experience in software development, IAM engineering, identity automation, or security engineering, with robust hands-on development expertise.- Advanced Python and PowerShell skills, including API integrations, data processing, automation frameworks, and production-grade scripting.- Strong understanding of Active Directory and Microsoft Entra ID, including directory objects, group nesting, service principals, application identities, and authorization models.- Practical understanding of AWS IAM, GCP IAM, and OCI IAM, including effective permissions, role assumption, policy evaluation, service accounts, and resource hierarchies.- Experience with Microsoft Graph API, boto3, cloud APIs and CLIs, authentication mechanisms, pagination, and resilient integration design.- Strong SQL and data analysis skills for processing large datasets, reconciling identities, mapping entitlements, and identifying access anomalies.- Solid understanding of RBAC, least privilege, privileged access, entitlement management, identity lifecycle, and access governance.- Experience with Git, automated testing, CI/CD, secure coding, logging, and troubleshooting production integrations. (ref:hirist.tech)

📌 Incedo - Technical Lead - iAM (Gurugram)
🏢 Incedo Technology Solutions
📍 Gurugram