Identity & Access Management - Testing Engineer

Infosys; Hyderabad, Pune District, Gurugram District; On-site; INR 1,400,000 - 2,100,000; Full time

Job summary

Infosys is seeking an IAM professional to manage end-to-end IAM processes, including joins, moves and leavers, and to design provisioning workflows.

The role requires hands-on experience with SSO, MFA, SAML, OAuth 2.0, OpenID Connect, and LDAP, plus governance of privileged accounts and NHIs. You will collaborate across security, applications, and infrastructure teams to ensure robust identity controls.

Qualifications

• Experience with IAM platforms and lifecycle management.
• Ability to design or implement RBAC models and access governance.
• Hands-on with SSO, MFA, SAML, OAuth 2.0, OpenID Connect, LDAP/AD.
• Knowledge of PAM and NHIs (non-human identities) lifecycle.

Responsibilities

• Manage end-to-end IAM processes including JML lifecycle.
• Design and support user provisioning workflows.
• Implement and maintain RBAC models and access reviews.
• Configure and troubleshoot SSO, MFA, SAML, OAuth 2.0, OpenID Connect, LDAP integrations.
• Govern and manage NHIs and privileged accounts.

Skills

IAM platforms

RBAC design

Access governance

Security controls

Tools

Saviynt

SailPoint IdentityIQ/IdentityNow

Azure AD / Entra ID

Job description

Role & responsibilities

• Manage end-to-end Identity and Access Management (IAM) processes including Joiner-Mover-Leaver (JML) lifecycle.


• Design, implement, and support user provisioning/de-provisioning workflows.


• Implement and maintain Role-Based Access Control (RBAC) models.


• Perform access certification reviews, entitlement governance, and segregation of duties (SoD) analysis.


• Manage end-to-end Application Onboarding into the IAM platform, including defining access models, configuring role-based provisioning, and establishing authentication standards.


• Manage and troubleshoot SSO, MFA, SAML, OAuth 2.0, OpenID Connect, and LDAP integrations.


• Support Privileged Access Management (PAM) solutions and privileged account governance.


• Govern and manage Non-Human Identities (NHIs) including service accounts, API keys, bots, and machine credentials, ensuring proper lifecycle management, least-privilege access, and periodic attestation to reduce security risk.


• Design, configure, and maintain IAM connectors (including SC2 and REST-based connectors) to enable automated provisioning, deprovisioning, and reconciliation between the identity governance platform and target applications or directories


• Conduct access reviews, audits, and compliance assessments.


• Collaborate with security, application, infrastructure, and business teams to define access requirements.


• Analyze security risks and implement appropriate identity controls.


• Develop IAM reports, dashboards, and metrics for audit and compliance purposes.


• Participate in incident management, problem management, and change management activities.


• Create and maintain technical documentation, SOPs, and knowledge articles.

Preferred candidate profile

• Strong experience with one or more IAM platforms:
  
  
  
  • Saviynt
  
  
  • SailPoint IdentityIQ / IdentityNow
  
  
  • Azure AD / Microsoft Entra ID
  
  
  
  

Authentication & Authorization

• Single Sign-On (SSO)


• Multi-Factor Authentication (MFA)


• SAML


• OAuth 2.0


• OpenID Connect


• LDAP / Active Directory

Access Governance

• User Access Management


• Role Management


• Access Certification


• RBAC


• SoD Controls


• Identity Governance & Administration (IGA)

Security & Compliance

• ISO 27001


• NIST


• SOXGDPR


• ITGC Controls

Preferred Skills

• Experience with CyberArk or other PAM tools.


• Knowledge of cloud security, Azure/AWS IAM services.


• Experience in automation using PowerShell, Python, or REST APIs.


• Familiarity with ServiceNow integration and ticket workflows.


• Understanding of Zero Trust security principles.