IAM and PAM Security Lead

Teciem; Bengaluru; On-site; INR 3,000,000 - 6,000,000; Full time

Job summary

Teciem, a global fintech leader, is seeking an IAM and PAM Security Lead in Bengaluru to build scalable identity security solutions for financial institutions. You will govern IAM policies, enforce least-privilege, and drive PAM initiatives across cloud, on-prem, and hybrid environments.

Lead privileged access programs, monitor sessions, and coordinate access reviews with stakeholders to strengthen security posture. 8+ years in security with hands-on IAM/PAM experience are required.

Qualifications

• 8+ years in information security or infrastructure with 5+ years in IAM and PAM administration.
• Hands-on administration of enterprise PAM platforms (CyberArk, Delinea, BeyondTrust, One Identity).
• Experience with Azure AD/Entra ID including CA, PIM, group management, and entitlement governance.
• Knowledge of authentication/federation: SAML 2.0, OAuth 2.0, OIDC, Kerberos, LDAP, SCIM.

Responsibilities

• Define, enforce, and govern IAM policies, baselines, and JML processes across platforms.
• Lead privileged access governance, vaulting, rotation, session monitoring, and lifecycle management.
• Manage access reviews, SoD controls, and remediation tracking with business owners.
• Monitor identity lifecycle events and ensure timely provisioning/deprovisioning.
• Collaborate with SOC/IT teams for identity-related security incidents and investigations.

Skills

IAM Administration

PAM Administration

Azure AD

CyberArk

PowerShell

Python

SAML/OIDC

Zero Trust

Education

Bachelor's degree in CS/IS/Engineering

Tools

SailPoint

Saviynt

Delinea

Microsoft Entra ID

Job description

Join Teciem, a global fintech company delivering cutting-edge Treasury & Capital Markets software solutions to financial institutions worldwide.

We're looking for a talented IAM and PAM Security Lead who is passionate about building resilient, scalable, and high-performing systems. If you thrive in a fast-paced environment and enjoy solving complex infrastructure challenges, we'd love to hear from you.

Key Responsibilities

IAM Governance & Identity Security

• Define, maintain, and enforce IAM policies, standards, procedures, and security baselines.
• Ensure effective Joiner-Mover-Leaver (JML) processes are implemented and followed across all platforms.
• Review and approve role models, access profiles, RBAC structures, and entitlement frameworks.
• Monitor identity lifecycle activities to ensure timely provisioning, modification, and deprovisioning of accounts.
• Govern Microsoft Entra ID, Active Directory, and enterprise SaaS identity integrations from a security and compliance perspective.
• Review and monitor implementation of MFA, passwordless authentication, Conditional Access, Identity Protection, and risk-based authentication controls.
• Maintain an inventory of privileged, service, shared, and non-human accounts, ensuring ownership and accountability exist for all identities.
• Identify excessive permissions, toxic combinations, dormant accounts, orphan accounts, and access anomalies.

Privileged Access Management Governance

• Act as the Information Security SME for enterprise PAM initiatives.
• Define and maintain standards for privileged access, vaulting, credential management, session monitoring, and privileged account lifecycle management.
• Review and validate privileged access requests and ensure appropriate approvals and business justifications exist.
• Ensure privileged access follows least-privilege, just-in-time (JIT), and just-enough-access (JEA) principles.
• Govern emergency and break-glass account management processes.
• Review privileged account onboarding across servers, cloud environments, databases, applications, network devices, and client environments.
• Validate credential rotation policies and monitor adherence to privileged account management requirements.
• Review privileged session monitoring reports and identify unauthorized or risky privileged activities.

Access Reviews & Compliance

• Manage enterprise-wide User Access Review (UAR) and access recertification programs.
• Coordinate periodic privileged access reviews with business owners and application custodians.
• Validate Segregation of Duties (SoD) controls and identify conflicting access combinations.
• Track remediation of access-related audit findings and risk exceptions.
• Maintain evidence repositories supporting:
• ISO 27001
• SOC 2
• DORA
• NYDFS
• Client security audits
• Internal audits
• Develop and maintain IAM/PAM compliance dashboards and reporting metrics.
• Perform identity-related risk assessments across cloud, infrastructure, applications, and managed services environments.
• Assess risks associated with privileged access, service accounts, shared accounts, and third-party access.
• Review access control design for new applications, systems, acquisitions, and cloud services.
• Identify gaps in identity security controls and drive remediation plans with IT and technology teams.
• Monitor identity threats including credential abuse, privilege escalation, excessive permissions, account compromise, and insider threats.

Security Monitoring & Incident Response

• Collaborate with SOC, SIEM, and incident response teams during identity-related security incidents.
• Support investigation of:
• Privileged misuse
• Unauthorized access
• Credential theft
• Review identity and PAM logs to support forensic investigations and audit requests.
• Coordinate rapid access revocation activities during security incidents.

Preferred Skills

• Experience with Identity Governance & Administration (IGA) platforms such as SailPoint, Saviynt, Omada, or Microsoft Identity Governance.
• Understanding of cloud IAM across Azure, AWS, and GCP.
• Familiarity with Cyber Security controls, Zero Trust Architecture, and Identity Threat Detection & Response (ITDR).
• Experience within banking, financial services, fintech, treasury, capital markets, or managed services environments.
• Knowledge of service account governance and secrets management solutions such as CyberArk Conjur, HashiCorp Vault, or Azure Key Vault.
• Scripting knowledge in PowerShell, Python, or API integrations is advantageous.

Essential skills and experience

• 8+ years in information security or infrastructure, with at least 5 years hands-on in IAM and PAM administration.
• Demonstrable administration experience with Microsoft Entra ID (Azure AD) and Active Directory, including conditional access, PIM, group and entitlement management.
• Hands-on administration of at least one enterprise PAM platform — CyberArk, Delinea, BeyondTrust, One Identity or equivalent — covering vaulting, rotation, session management and account onboarding.
• Practical understanding of authentication and federation protocols: SAML 2.0, OAuth 2.0, OIDC, Kerberos, LDAP, SCIM.
• Experience administering privileged access across mixed Windows and Linux estates, databases and cloud platforms.
• Scripting and automation capability in PowerShell and/or Python, including REST API integration.
• Experience operating access controls in a regulated environment and producing evidence for external audit.

Qualifications and certifications

• Bachelor's degree in computer science, information systems, engineering or related discipline, or equivalent practical experience.
• One or more of the following is valued: CyberArk Defender/Sentry, Delinea or BeyondTrust certification, Microsoft SC-300 (Identity and Access Administrator), Microsoft SC-200, CISSP, CISM, or CIAM/IDPro credentials.