Identity Specialist

L''OREAL INDIA PVT LTD; Hyderabad; On-site; INR 1,800,000 - 2,400,000; Full time

Benefits offered by this job

Flexible hybrid work model

Global exposure and learning

Wellbeing and health benefits

Incentives and recognition

Job summary

LOral India Pvt Ltd in Hyderabad is hiring an Identity Specialist to lead IAM solutions, including AD/Entra ID, PKI, and PAM implementations. You will drive secure access, certificate lifecycle, and MFA strategies across on‑prem and cloud environments.

The role requires 7+ years in IAM within large enterprises, strong collaboration across IT and security teams, and clear communication with non-technical stakeholders. A modern hybrid workplace is offered with growth opportunities.

Qualifications

• 7+ years in Identity and Access Management (IAM) in large enterprises.
• Expertise in AD, Entra ID and related services (federation, sync).
• Hands-on PKI management and certificate lifecycle experience.
• Proven PAM implementation experience, especially CyberArk.
• Strong MFA knowledge and deployment practices.
• Familiar with identity governance, access reviews, compliance.
• Excellent collaboration and ability to explain complex topics.

Responsibilities

• Lead architecture, implementation, and administration of core identity services (AD and Entra ID).
• Manage PKI lifecycle, including certificate issuance and revocation.
• Design and maintain PAM solutions (CyberArk) for privileged access.
• Implement and manage MFA strategies for on-prem and cloud resources.
• Develop provisioning and deprovisioning processes and access reviews.
• Collaborate with Cyber Security and other IT teams to integrate IAM.
• Plan identity projects from conception to go-live and post‑go-live support.
• Monitor health, performance, and security of identity infrastructure.

Skills

AD & Entra ID

CyberArk PAM

PKI management

MFA deployment

Identity governance

IAM strategies

Threat response coordination

Cross-functional collaboration

Communication skills

Education

Bachelor's degree in CS or related

Tools

Active Directory

Entra ID (Azure AD)

PKI tooling

Power BI

Job description

Who Are We

For 115 years, LOral, the worlds leading beauty player, has devoted itself to one thing only: fulfilling the beauty aspirations of consumers around the world.

For more than a century, LOral has devoted itself solely to one business: Beauty. Present in 150 countries across five continents and with 42 billion consolidated sales, LOral is the global industry leader. With 37 global beauty brands across four divisions, LOral offers beauty for each covering all beauty categories and catering to all beauty desires. With the acquisition of the Australian brand Asopin 2023, the Group continues to expand its portfolio through targeted acquisitions as part of its drive to create the future of beauty.

Today, LOral includes more than 2,000 tech professionals and is constantly growing. Beauty Tech is changing the game and leading the shift towards new consumer realities and digital disruption. Championing Beauty Tech, we invent the beauty of the future while becoming the company of the future.

Beauty Tech is how we know our consumers intimately, augmenting their beauty journeys with unparalleled diverse and sustainable experiences. Beauty Tech equips the Group with the key assets it needs to conquer this new world, where Tech has become strategic. With this ambition, LOral continues to recruit diverse, innovative, skilled and passionate minds in different tech domains such as Data, Digital, Cloud, Cyber Security, IT Architecture, DevOps, Applications and Infrastructure.

A Day in the Life of Identity Specialist!

This role of Identity Specialist is responsible for the comprehensive implementation and operational management of our identity and access management solutions, with a primary focus on ensuring robust identity protection across the enterprise, involving leading the transformation and optimization of critical identity infrastructure, collaborating with security and IT teams, and driving the adoption of best practices to secure user access and privileged accounts.

In this role, You will..

Be responsible for the following:

• Lead the architecture, implementation, and administration of core identity services including Active Directory (AD) and Entra ID (Azure AD), ensuring high availability, security, and performance.
• Manage the Public Key Infrastructure (PKI) lifecycle, including certificate issuance, revocation, and integration with various enterprise applications and systems.
• Design, deploy, and maintain privileged access management (PAM) solutions, specifically CyberArk, to safeguard sensitive credentials and manage elevated access efficiently.
• Implement and manage Multi-Factor Authentication (MFA) strategies and solutions, enhancing security for both on-premises and cloud-based resources.
• Develop and enforce robust account management processes, including provisioning, de-provisioning, and regular access reviews, to align with security policies and compliance requirements.
• Serve as a subject matter expert for all Identity and Access Management (IAM) related technologies and initiatives, providing guidance and support to various IT and business units.
• Collaborate closely with Cyber Security, and other IT teams to integrate identity solutions, respond to security incidents, and maintain a strong security posture.
• Strategize, plan, and execute projects related to identity system enhancements, upgrades, and integrations from conception to successful Go-live, ensuring a smooth transition into operations.
• Monitor and report on the health, performance, and security of identity infrastructure and services, ensuring service delivery meets defined SLAs and business requirements.

What are we looking for

• Bachelor''s degree in Computer Science, Information Security, or a related study, or equivalent practical experience.
• 7+ years of progressive experience in Identity and Access Management (IAM), with a focus on identity protection, privileged access management, and directory services in large enterprise environments.
• Demonstrated expert-level proficiency with Active Directory (AD), Entra ID (Azure AD), and their associated services (e.g., federation, synchronization).
• In-depth hands-on experience with Public Key Infrastructure (PKI) management and certificate lifecycle.
• Proven experience in implementing, configuring, and managing Privileged Access Management (PAM) solutions, specifically CyberArk.
• Strong understanding and practical experience with Multi-Factor Authentication (MFA) technologies and deployment strategies.
• Familiarity with identity governance principles, access reviews, and compliance frameworks.
• Strong collaboration and influencing skills, with a proven ability to work effectively across diverse teams and communicate complex technical concepts to non-technical stakeholders.
• Demonstrated effective oral, written, and interpersonal communication skills.
• Strategic thinking with a proactive, results-oriented approach and a passion for innovation in identity security.

Nice to Have

• Preferable: Experience with Power BI or similar data visualization tools for reporting, dashboard creation, and analytics related to identity data and security metrics.

Whats In It for You

• Working with cutting edge Technology, empowering employees with new age learning, global exposure, and opportunities to build future-ready careers.
• A flexible and modern workplace, enabling teams to perform at their best through a smart hybrid model that supports balance and autonomy. A 3 Day in Office, 2 Day Work from Home setup.
• Employee support at every life stage, with inclusive and progressive parental policies that help individuals and families thrive.
• Holistic wellbeing offerings - personalized health benefits and strong mental wellness support to ensure employees feel their best.
• Reward and Recognition opportunities, long-term incentives, and opportunities to share in LOrals collective success.
• L''Oreal is an Equal Opportunity Employer and takes pride in a diverse environment

Good to know: The Recruitment Process

1. Interview with HR
2. Technical Interview
3. Interview with the hiring manager

We would love to find out more about you as a candidate and we do not discriminate in recruitment, hiring, training, promotion, or other employment practices. The beauty we find in our differences gives us the freedom to go beyond. Thats the beauty of LOral.