Identity Security Privileged Access Architect

FNZ Group; Pune District; Hybrid; INR 2,500,000 - 4,200,000; Full time

Job summary

FNZ Group in Pune, India is seeking an Identity Security Privileged Access Architect to design, implement and operate IAM and privileged access controls across platforms, with emphasis on CyberArk and cloud identities. You will partner with global engineering teams to mature governance, automation and security documentation.

The role requires deep expertise in EntraID/AD, Secrets management and Just-in-Time access, plus the ability to communicate risk concepts to stakeholders at all levels.

Qualifications

• Experience with IAM lifecycle including EntraID and AD.
• Hands-on experience with CyberArk privileged access management.
• Strong knowledge of secrets management (SSH, keys, certs).
• Ability to develop and maintain formal security documents and policies.

Responsibilities

• Contribute to development and improvement of privileged access tools and governance.
• Mature security controls, services and processes around privileged access.
• Support governance and oversight of security controls and services.
• Implement Just in Time and least privileged access patterns.
• Support global CyberArk instances and cloud adoption.

Skills

IAM lifecycle

EntraID / AD / Cloud

CyberArk

Secrets management

Security governance/docs

Stakeholder management

Security concepts communication

Scripting / coding

Azure cloud identity

Education

Bachelor's degree in Computer Science or related

Tools

CyberArk

Azure

EntraID

Job description

Job Title: Identity Security Privileged Access Architect

Location: Pune, India

Reports to: Head of Identity Security

Role Description:

At FNZ, our purpose is to make wealth management more accessible, bringing easier, fairer and more inclusive solutions to people worldwide. Here within the Security Technology and Ops team, we are on a mission to embed cyber resilience across FNZ, protecting the platforms that support investment solutions for over 20 million people. We are seeking a strong Privileged Access Architect / Engineer to support the design, automation and implementation of Identity and Privileged access management solution (CyberArk). Must have knowledge of identity stores (e.g. EntraID and Active Directory) and cloud identity concepts. Will work across identity solutions as part of Identity security team such as Secrets Management and CyberArk. Must be able to script automated solutions and engage with business stakeholders to solutionise identity concepts. The successful candidate will combine deep technical expertise in security platforms with engineers, drive operational maturity, and deliver engineering improvements across multiple security domains. This role sits within Identity Security. The focus is on engineering and. You will work closely with global engineering teams and the Identity Security function across the global audience.

Specific Role Responsibilities:

• Contribute to the development and improvement of the group privileged Access tool (CyberArk) moving to a possible SaaS solution and hybrid model
• Drive initiatives to mature security controls, services and processes around privileged access
• Support in building effective governance and oversight of security controls and services.
• Support in the delivery of the Global technology strategy, Working with the Identity Security Team.
• Contribute to the development and maintenance of formal security documentation (i.e. policies, standards).
• Support the implementation of Just in Time, least privileged processes
• Support the Global CyberArk Instances (currently 3 on prem instances in place)
• Build the patterns for Management of Non-Human / Service accounts • AI risk identification for Privileged access
• Support a controlled monitoring function to manage user sessions
• Support Groups and users within Groups for key platforms and services
• Support in the development and delivery of consistent global services that enable delivery of the business goals.

Experience required

Primary requirements

• Strong experience of IAM lifecycle and Specifically Entra / AD / Cloud and CyberArk
• Strong Secrets management knowledge controlling SSH, Keys, passwords & Certificates
• SME level knowledge Experience in developing and managing formal security documents.
• Proven ability to manage internal stakeholders through a journey of improving maturity.
• Good ability to communicate information security and risk concepts to stakeholders of all levels.
• Vendor tooling CyberArk Guardian level knowledge
• Coding skillset and knowledge to support other engineers and the Identity Security team
• Cloud (MS Azure as a main focus) privileged account strategy and ownership