IAM Consultant

K2 Partnering Solutions; Pune District; Presencial; INR 1.800.000 - 3.000.000; Jornada completa

Descripción de la vacante

K2 Partnering Solutions is assisting a global enterprise to strengthen its Identity & Access Management capabilities. We seek a Senior IAM Consultant to blend engineering depth, automation, and security mindset to protect digital assets.

You will translate security requirements into IAM designs, automate access lifecycles, and collaborate across IT and business teams, working on AD, Entra ID, MFA, and PAM.

Formación

• Bachelor’s degree in Computer Science, Cybersecurity, or engineering.
• Hands-on experience with Active Directory, Entra ID, MFA, CA, IGA, PAM, and PKI/Certificate Management.
• Solid understanding of SSO configurations using Ping Identity, Entra ID, or equivalent federation technologies (SAML, OAuth, OIDC).
• Strong scripting skills in PowerShell, Python, or Ansible for automated provisioning.
• Familiarity with Git and CI/CD pipelines.
• Data-driven approach to detecting security gaps and anomalies.

Responsabilidades

• Configure, maintain, and troubleshoot core enterprise identity solutions.
• Design and enforce least-privilege security controls, including MFA, CA, PAM, and IGA.
• Build scripts and CI/CD pipelines to automate identity provisioning and onboarding.
• Integrate identity services with applications via API gateways (APIGEE) and containers (Docker/Kubernetes).
• Analyze access data to identify entitlement anomalies and generate compliance reports.
• Collaborate across IT and business projects to ensure delivery aligns with security standards.

Conocimientos

Active Directory

Entra ID

MFA

Conditional Access

IGA

PAM

PKI/Certificate Management

Educación

Bachelor's degree in CS/Cybersecurity/Engineering

Herramientas

PowerShell

Python

Ansible

Git

CI/CD

APIGEE

Docker

Kubernetes

Descripción del empleo

Our client is an industry-leading global enterprise dedicated to innovation, sustainability, and digital transformation. Their core Security Operations division operates an elite, fully in-house Identity & Access Management team tasked with protecting critical digital assets, global infrastructure, and thousands of user endpoints worldwide.

They are seeking a Senior IAM Consultant who brings a blend of technical engineering depth, automation capability, and a proactive security mindset to help safeguard their expanding digital footprint.

Role Overview

As an IAM Consultant, you will serve as a technical subject matter expert within the core security organization. This is a balanced engineering, support, and automation role. You will be responsible for translating security requirements into functional IAM design configurations, resolving complex identity issues, and automating access lifecycles to reduce administrative overhead and security risk.

Key Responsibilities

• Identity Engineering & Support: Configure, maintain, and troubleshoot core enterprise identity solutions, including Active Directory, Microsoft Entra ID, Single Sign-On (SSO via Ping Identity or similar), and Public Key Infrastructure (PKI).
• Access Control & Governance: Design and enforce least-privilege security controls, including Multi-Factor Authentication (MFA), Conditional Access Policies, Privileged Access Management (PAM), and Identity Governance & Administration (IGA).
• Process Automation: Build scripts (PowerShell, Python, Ansible) and leverage modern CI/CD practices to automate identity provisioning, user onboarding/offboarding, and administrative workflows.
• API & System Integration: Partner with integration teams to connect identity services to enterprise applications via API gateways (such as APIGEE) and containerized microservices environments (Docker, Kubernetes).
• Identity Analytics & Risk Reduction: Perform continuous data analysis on access assignments to identify entitlement anomalies, eliminate security gaps, and deliver compliance reporting.
• Cross-Functional Collaboration: Serve as the IAM subject matter expert across various IT and business project initiatives, ensuring delivery aligns with broader organizational deadlines and security standards.

Must-Have Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent professional experience.
• Proven hands‑on experience with Active Directory, Entra ID, MFA, Conditional Access, IGA, PAM, and PKI/Certificate Management.
• Solid understanding of SSO configurations using Ping Identity, Entra ID, or equivalent federation technologies (SAML, OAuth, OIDC).
• Strong scripting skills using PowerShell, Python, or Ansible to drive automated provisioning.
• Familiarity with version control (Git) and CI/CD pipelines.
• Excellent problem‑solving abilities with a data‑driven approach to detecting security gaps and anomalies.

Highly Desirable Skillsets (Nice-to-Haves)

• Experience with SAP Identity tools (SAP IAS / IPS).
• Exposure to Customer Identity and Access Management (CIAM) architecture.
• Working knowledge of API Gateways (APIGEE) and Containerization (Docker, Kubernetes).
• Relevant certifications: Microsoft Certified: Identity and Access Administrator Associate, Certified Omada Engineer, or similar industry credentials.