About the role
We are seeking an experienced IDM Security Operations Engineer to design, implement, and manage enterprise-grade Identity Management (IDM) and Privileged Access Management (PAM) solutions. The ideal candidate will ensure a secure, scalable, and compliant Identity and Access Management (IAM) environment across the organization.
Design, implement, and manage enterprise IDM/IAM solutions including user provisioning, deprovisioning, and access certification
Administer and manage PAM platforms (CyberArk / BeyondTrust / Delinea) including privileged account onboarding and session management
Enforce least-privilege, RBAC, and SoD policies across all platforms and systems Monitor and respond to identity-related security incidents in collaboration with the SOC team
Architect and implement PAM frameworks aligned with organizational security policies, compliance requirements, and industry best practices. Define and enforce least-privilege access principles across all systems, applications, and infrastructure components. Lead the onboarding of privileged accounts (service accounts, admin accounts, shared accounts) into the PAM platform. Design and implement Just-In-Time (JIT) and Just-Enough-Access (JEA) provisioning models to minimize standing privileges. Manage and govern privileged identities across hybrid environments including on-premises, cloud (AWS, Azure, GCP), and SaaS platforms. Conduct regular privileged access reviews and certifications to ensure access rights remain appropriate and compliant. Develop and maintain role-based access control (RBAC) and attribute-based access control (ABAC) models for privileged users. Enforce Separation of Duties (SoD) policies to prevent unauthorized or conflicting access privileges. Maintain a comprehensive privileged account inventory across Windows, Linux, macOS, and network devices. Monitor privileged session activity in real time using Privileged Session Management (PSM) and session recording capabilities. Conduct regular PAM audits and access reviews to ensure compliance with regulatory frameworks such as PCI-DSS, ISO 27001, SOC 2, GDPR, RBI, and SEBI guidelines. Generate and present PAM compliance reports to management and audit teams on a periodic basis. Investigate and respond to privileged access violations, anomalies, and security incidents in collaboration with the SOC team.