About the role
Key Responsibilities
- Provide daily operational support for IAM/IGA systems including:
- User onboarding/offboarding
- Role and entitlement management
- Access certification and review processes
- Customize or develop IAM workflows, connectors, and policies using Java and Groovy
- Design, develop, and maintain custom connectors for target application integrations
- Maintain and query identity data in MongoDB/SQL databases for troubleshooting and analytics
- Integrate with systems such as Active Directory, LDAP, Azure AD, and RESTful/SOAP APIs for identity provisioning and access control
- Configure and manage Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integrations
- Work with SAML, OAuth 2.0, and OpenID Connect (OIDC) protocols for authentication and federation
- Design and implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models
- Configure and manage access certification campaigns and periodic access reviews
- Collaborate with internal teams and stakeholders to troubleshoot access issues, perform root cause analysis, and resolve user account problems
- Perform application onboarding, including birthright access rules and entitlement mapping
- Ensure IAM policies and operations align with organizational security standards and compliance requirements (SOX, GDPR, ISO 27001, etc.)
- Document technical configurations, changes, architecture diagrams, and standard operating procedure
- Assist in incident response, root cause analysis, and continuous improvement efforts for IAM services
- Mentor junior team members and support knowledge transfer within the team
Required Skills & Qualifications
- 4+ years of experience in IAM/IGA support or implementation roles
- Hands-on experience with Cymmetri IDAM tool preferred
- Proficient in Java for scripting, customization, and connector development within IAM platforms
- Strong hands-on experience with Groovy scripting
- API development and API testing experience (Postman, SoapUI, or similar tools)
- Working knowledge of MongoDB/SQL – ability to write queries and investigate data issues
- Experience working with Active Directory and Azure AD for user creation, properties, group management, and authentication
- Familiarity with REST/SOAP APIs for system integration and automation
- Practical knowledge of SAML, OAuth 2.0, and OIDC protocols
- Experience configuring SSO and MFA solutions
- Understanding of RBAC/ABAC access models
- Hands-on experience with Joiner-Mover-Leaver (JML) process
- Experience in user provisioning and de-provisioning across multiple target systems
- Experience with access certification/access review campaign configuration
- Experience creating user manuals and technical documentation for end users
- Experience with UAT and production integration/deployment of applications
- Basic understanding of LDAP directory structures and schema
- Familiarity with version control tools (Git) and basic CI/CD concepts is a plus
- Strong problem-solving skills with a security-first mindset
- Clear and effective communication and documentation skills
- Experience with incident and change management processes (ITIL-aligned)
- Bachelor’s degree in computer science, Information Technology, or related field (preferred)
- Experience with Cymmetri IDAM tool
- Exposure to IAM tools like SailPoint, Saviynt, ForgeRock, or Okta
- Familiarity with ITIL practices
- Exposure to cloud platforms (Azure/AWS) for IAM deployments
- Basic scripting knowledge in Python or Shell
- Understanding of PAM (Privileged Access Management) concepts
- Basic understanding of IGA concepts – like Access Review, Provisioning, Deprovisioning etc