IAM Vulnerability Engineer

Persistent-Systems; Pune District; On-site; INR 1,200,000 - 2,400,000; Full time

Benefits offered by this job

Salary & benefits

Education sponsorship

Cutting-edge technologies

Employee engagement

Insurance coverage

Job summary

Persistent Systems Limited in Pune seeks an IAM Vulnerability Engineer to strengthen identity security across the enterprise. You will lead vulnerability remediation, AD hardening, and Entra-based MFA and PAM controls while coordinating with security and infrastructure teams.

Ideal candidates bring hands-on experience with Qualys/Nessus/Tenable, ISAM on Linux, GPOs, and privileged access reviews, along with a bachelor’s in CS/IT.

Qualifications

• 5-8 years of experience in Identity and Access Management or security engineering.
• Strong AD security hardening and Group Policy management experience.
• Hands-on experience with Microsoft Entra including CA, MFA, Identity Protection, and PAM.
• Experience with ISAM on Linux administration, troubleshooting, and integration.
• Familiarity with LDAP, authentication, authorization, and directory services.
• Experience with vulnerability assessment and remediation planning.
• Knowledge of PAM, identity governance, provisioning and access certification.

Responsibilities

• Analyze, assess, and remediate vulnerabilities from Qualys, Nessus, Tenable, and similar tools.
• Perform AD security hardening, configuration reviews, and privilege management assessments.
• Manage and optimize GPOs to enforce security standards and compliance.
• Conduct privileged account reviews, entitlement validations, and access-control assessments.
• Enhance Entra security controls including CA, MFA, Identity Protection, and PAM.
• Troubleshoot and resolve security findings, provisioning issues, and ISAM on Linux integrations.
• Coordinate remediation planning, testing, deployment, and post-remediation validation.
• Collaborate with infrastructure, security, and application teams to implement improvements.
• Perform root-cause analysis for security incidents and recurring vulnerabilities.
• Maintain remediation trackers, audit evidence, and risk reports.

Skills

Active Directory

Microsoft Entra

ISAM on Linux

GPO management

Privileged access

Vulnerability management tools

PowerShell scripting

LDAP / Directory Services

Identity governance

Education

Bachelor's degree in CS/IT/InfoSec

Tools

Qualys

Nessus

Tenable

PowerShell

SailPoint IdentityIQ

CyberArk

Job description

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what's next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem.

We are seeking an experienced IAM Vulnerability Engineer to support enterprise identity and access management platforms with a strong focus on vulnerability remediation, security hardening, compliance, and operational excellence. The ideal candidate will possess hands‑on expertise in Active Directory, Microsoft Entra, and ISAM on Linux environments, ensuring secure identity services and effective remediation of security risks. This role requires collaboration with security, infrastructure, and compliance teams to maintain a robust identity security posture across the organization.

• Role: IAM Vulnerability Engineer
• Location: Pune
• Experience: 5 to 8 Years
• Job Type: Full-Time Employment

What You'll Do:

• Analyze, assess, and remediate vulnerabilities identified through tools such as Qualys, Nessus, Tenable, and other vulnerability management platforms.
• Perform Active Directory security hardening, configuration reviews, privilege management assessments, and remediation activities.
• Manage and optimize Group Policy Objects (GPOs) to enforce security standards and compliance requirements.
• Conduct privileged account reviews, entitlement validations, and access‑control assessments.
• Enhance Microsoft Entra security controls including Conditional Access, Multi‑Factor Authentication (MFA), Identity Protection, and Privileged Access Management.
• Troubleshoot and resolve security findings, provisioning issues, workflow failures, and integration problems within ISAM on Linux environments.
• Coordinate remediation planning, testing, deployment activities, and post‑remediation validation processes.
• Collaborate with infrastructure, security, and application teams to implement corrective actions and security improvements.
• Perform root‑cause analysis for security incidents and recurring platform vulnerabilities.
• Maintain remediation trackers, audit evidence, compliance documentation, and risk reports.
• Support governance, risk, and compliance initiatives related to identity security.
• Participate in change‑management and release‑management activities to ensure secure implementation of remediation measures.
• Monitor identity platforms and security controls to identify opportunities for continuous improvement.

Expertise You'll Bring:

• 5–8 years of experience in Identity and Access Management, Security Engineering, Directory Services, or related domains.
• Strong hands‑on expertise in Active Directory administration, security hardening, and Group Policy management.
• Experience working with Microsoft Entra, including Conditional Access, MFA, Identity Protection, and privileged access controls.
• Hands‑on knowledge of ISAM on Linux administration, troubleshooting, and integration.
• Strong understanding of LDAP, authentication, authorization, and directory services.
• Experience with vulnerability assessment, remediation planning, and security hardening processes.
• Knowledge of Privileged Access Management (PAM), Identity Governance, provisioning, and access certification processes.
• Experience working with vulnerability management tools such as Qualys, Nessus, Tenable, or equivalent platforms.
• Familiarity with PowerShell scripting and automation of identity management tasks.
• Exposure to SailPoint IdentityIQ, CyberArk, or similar identity governance and PAM solutions is preferred.
• Understanding of ITIL processes, change management, and operational support frameworks.
• Strong analytical, troubleshooting, and problem‑solving capabilities.
• Effective communication and stakeholder management skills.
• Bachelor's degree in Computer Science, Information Security, Information Technology, or a related field.
• Competitive salary and benefits package
• Culture focused on talent development with quarterly growth opportunities and company-sponsored higher education and certifications
• Opportunity to work with cutting‑edge technologies
• Employee engagement initiatives such as project parties, flexible work hours, and Long Service awards
• Insurance coverage: group term life, personal accident, and Mediclaim hospitalization for self, spouse, two children, and parents

Values‑Driven, People‑Centric & Inclusive Work Environment:

Persistent is dedicated to fostering diversity and inclusion in the workplace. We invite applications from all qualified individuals, including those with disabilities, and regardless of gender or gender preference. We welcome diverse candidates from all backgrounds.

• We support hybrid work and flexible hours to fit diverse lifestyles.
• Our office is accessibility‑friendly, with ergonomic setups and assistive technologies to support employees with physical disabilities.
• If you are a person with disabilities and have specific requirements, please inform us during the application process or at any time during your employment

"Persistent is an Equal Opportunity Employer and prohibits discrimination and harassment of any kind."