We are seeking a detail-oriented Level 1 (L1) IAM Support Engineer to provide front-line identity, access, and privilege management support across our ecosystem of 162 banking applications and their underlying infrastructure. In this role, you will be directly responsible for executing the day-to-day Joiner, Mover, Leaver (JML) identity lifecycle operations and handling first-line Privileged Access Management (PAM) requests. You will ensure all user access is granted securely, quickly, and in strict compliance with banking security policies, escalating complex system anomalies to the L2 engineering team.

Key Responsibilities

JML (Joiner, Mover, Leaver) Lifecycle Operations

- Joiner: Execute standard account provisioning, create system identities, and map new hires to predefined roles across the 162 banking applications.
- Mover: Modify Active Directory group memberships, adjust access rights, and update profiles based on internal departmental transfer requests.
- Leaver: Immediately deactivate accounts, revoke application access, and disable infrastructure entry profiles upon HR offboarding notifications to prevent security leakage.
- Token Management: Administer standard Multi-Factor Authentication (MFA) registrations, hardware token assignments, and digital certificate resets.

PAM (Privileged Access Management) & Triage

- Privileged Access Provisioning: Process first-line administrative and elevated access requests using established templates within the corporate PAM tool.
- First-Line Troubleshooting: Resolve routine access issues, including account lockouts, Single Sign-On (SSO) login failures, and password resets for both standard and privileged accounts.
- Incident Escalation: Efficiently triage,



document, and escalate complex JML synchronization errors or PAM vaulting failures to the L2 IAM team.

Ticket Management & Compliance

- Log, track, and close all access tickets within an enterprise ITSM tool (e.g., ServiceNow, Jira Service Desk) ensuring adherence to operational Service Level Agreements (SLAs).
- Verify proper business approvals and segregation of duties (SoD) documentation before executing any JML or PAM workflow.
- Maintain clear, continuous audit trails for all user access modifications to support financial regulatory compliance (SOX, SWIFT CSP, PCI-DSS).

Required Technical Skills

- Directory Services: Foundational knowledge of Microsoft Active Directory (AD) or Azure AD/Entra ID (managing security groups, unlocking accounts).
- IAM & PAM Concepts: Basic understanding of Identity Governance, Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Privileged Access controls.
- Ticketing Tools: Hands-on experience working with enterprise service desk platforms (ServiceNow, Remedy, or Jira).
- Office Productivity: Proficiency in using Microsoft Excel for verifying and auditing bulk user access sheets.

Qualifications & Experience

- Diploma or Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field.
- 1 to 2 years of experience in an IT Service Desk, Identity Helpdesk, or Technical Support role, ideally within a banking or financial environment.
- Excellent verbal and written communication skills with a robust focus on security compliance and customer service.
- Ability to work in a rotating shift model to provide continuous operational support for the banking estate.

Work Location: In person

📌 IAM Support Engineer (Navi Mumbai)
🏢 Bay of Bangalore IT Services
📍 Navi Mumbai