Identity Management Consultant

Adani Enterprises Limited; Ahmedabad District; On-site; INR 2,200,000 - 3,400,000; Full time

Job summary

Adani Enterprises Limited seeks an experienced IAM/PAM professional with hands-on expertise in Saviynt IGA, BeyondTrust, CyberArk, and Microsoft Entra ID to lead enterprise identity initiatives. The role focuses on governance, access management, and security posture across large deployments.

Responsibilities include designing and operating Saviynt workflows, integrating PAM with enterprise apps, and managing Entra ID security, with ongoing optimization for audit readiness and Zero Trust

Qualifications

• Bachelor's degree in Computer Science, Information Security, or related field.
• CyberArk Defender / Sentry certification
• BeyondTrust Certified Professional
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Responsibilities

• Design, implement, administer Saviynt Identity Governance solutions and JML lifecycle processes.
• Automate provisioning, de-provisioning, access reviews, and SoD controls.
• Integrate BeyondTrust and CyberArk PAM with identity providers and ITSM.
• Design and support Microsoft Entra ID environments with CA, MFA, passwordless approaches.
• Monitor privileged access activities; coordinate with SOC for incidents and audits.
• Maintain platform health, runbooks, patches, and disaster recovery testing.

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Saviynt IGA

BeyondTrust

CyberArk

Microsoft Entra ID

Job description

We are seeking a highly skilled IAM & PAM professional with 8-12 years of experience in Identity Governance, Privileged Access Management, and Identity Security. The candidate should possess deep hands-on expertise in Saviynt IGA, BeyondTrust, CyberArk, and Microsoft Entra ID, with proven experience in enterprise-scale deployments, operational management, architecture design, and security governance.

The role is responsible for IAM/PAM operations, managing IAM Center of Excellence (CoE) activities, driving identity transformation initiatives, improving the identity security posture and ensuring audit readiness

Qualification

• Bachelor's degree in Computer Science, Information Security, or related field.
• CyberArk Defender / Sentry certification
• BeyondTrust Certified Professional
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Role Summary

• 8-12 years of overall experience in IAM, IGA, PAM, directory services, or identity security
• Hands-on experience in IGA (Saviynt, SailPoint), PAM (BeyondTrust, CyberArk) and Microsoft Entra ID (Azure AD) is required for managing enterprise identity and access solutions.

Key Responsibilities

. Identity Governance & Administration - Saviynt

• Design, implement, administer, and support Saviynt Identity Governance solutions.
• Configure and manage Joiner-Mover-Leaver (JML) lifecycle processes, birthright access, Role-Based Access Control (RBAC), access requests and approvals, access certifications and campaigns, Segregation of Duties (SoD), and identity analytics.
• Develop and maintain Saviynt workflows, rules, connectors, jobs, reports, analytics, and custom integrations.
• Lead application onboarding using REST APIs, LDAP, JDBC, SCIM, Active Directory, and custom connectors.
• Automate provisioning, modification, de-provisioning, reconciliation, and access review processes.
• Support governance, risk, compliance, and audit requirements, including remediation of access-related findings.

2. Privileged Access Management – BeyondTrust, CyberArk

BeyondTrust

• Administer Password Safe.
• Configure privileged account discovery, onboarding, credential rotation, session monitoring, recording, and reporting.
• Integrate BeyondTrust with identity providers, SIEM, ITSM, and enterprise applications.

CyberArk

• Design, implement, administer, and support CyberArk PAM solutions.
• Manage Enterprise Password Vault (EPV), Privileged Session Manager (PSM), Central Policy Manager (CPM), Privileged Threat Analytics (PTA), and secrets management capabilities.
• Onboard privileged, service, database, infrastructure, and application accounts.
• Implement password rotation, credential reconciliation, session isolation, recording, and privileged access workflows.
• Perform platform health checks, upgrades, patching, backup validation, disaster recovery testing, and capacity planning.

3. Microsoft Entra ID & Identity Security

• Design, administer, and support enterprise Microsoft Entra ID environments.
• Implement and manage Conditional Access, multifactor authentication, passwordless authentication, Windows Hello for Business, Temporary Access Pass, Identity Protection, Privileged Identity Management, Entitlement Management, Access Reviews, and B2B collaboration.
• Configure enterprise application integrations using SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, and federation services.
• Develop automation using Microsoft Graph API, PowerShell, Azure Automation, and Logic Apps.
• Troubleshoot authentication, authorization, federation, token, provisioning, and Conditional Access issues.

Operations Activities

• Monitor scheduled jobs, workflows, connectors, reconciliations, provisioning queues, certification campaigns, vault operations, session services, and platform alerts.
• Investigate and resolve access request, provisioning, authentication, SSO, federation, Conditional Access, password rotation, vaulting, and privileged session issues.
• Perform privileged account, service account, and application secret onboarding and lifecycle support.
• Handle incidents, service requests, problem records, change requests, and escalations within agreed service levels.
• Review privileged activity, anomalous access, failed logins, policy violations, and high-risk events in coordination with SOC and incident response teams.

Platform Administration

• Monitor infrastructure and application health, availability, capacity, performance, certificates, licenses, integrations, and dependencies.
• Maintain connectors, agents, gateways, APIs, directory integrations, service accounts, and scheduled tasks.
• Plan and execute patches, upgrades, hotfixes, configuration changes, backup validation, restoration tests, and disaster recovery drills.
• Maintain platform documentation, configuration baselines, standard operating procedures, architecture diagrams, and support runbooks.
• Perform periodic access reviews for platform administrators and validate break-glass and emergency access controls.

IAM Professionals aligned with our ongoing initiatives around IAM transformation, Zero Trust, and enterprise access governance. can reach me at [e-mail] OR 9898791075.