Lead Analyst (IAM & Microsoft Security)

Pentland Brands; Bengaluru; On-site; INR 2,500,000 - 4,000,000; Full time

Job summary

Pentland Brands in Bengaluru seeks an experienced IAM and Microsoft security product owner to lead identity services, access governance, and PAM programs. You will set roadmaps, enforce controls, and partner with IT and security teams to protect enterprise assets.

The role requires 10-13 years in IAM and MS security, hands-on setup of Entra ID/Azure AD, SAML/OIDC, and PAM tooling. You will drive automation, audits, and continuous improvements while aligning with regulatory requirements.

Qualifications

• 10-13 years of Relevant Experience in IAM & MS security.
• Microsoft Entra ID (Azure AD) advanced configuration and identity architecture
• Identity Access Management platform expertise (e.g. Microsoft, Ping, SailPoint, etc)
• Privileged Access Management solutions (e.g. BeyondTrust PAM or equivalent)
• Identity governance and administration (IGA) concepts and tooling
• Authentication (SAML, OAuth, OIDC) and provisioning (SCIM)
• Conditional Access, MFA, and Zero Trust principles
• Automation and scripting (PowerShell, Graph API)
• Integration with SaaS, cloud (Azure), and on-prem identity systems (e.g. AD)
• Working knowledge of security frameworks (e.g. NIST, CIS) and ability to translate controls into practical IAM and Microsoft security configurations
• Microsoft certification related to the aforementioned would be a distinct advantage

Responsibilities

• Own IAM and PAM platforms end-to-end; define roadmap, capabilities, and service improvements aligned to business and security strategy.
• Act as Product Owner for the Microsoft security ecosystem including Entra ID (Azure AD), Microsoft threat detection and protection suite, and identity protection capabilities.
• Define and oversee joiner, mover, and leaver (JML) processes across HR and IT, ensuring controls are consistently applied and aligned to least privilege principles.
• Conduct regular audits and control checks to validate that JML processes are operating effectively, with clear ownership of remediation actions where gaps are identified.
• Maintain authority to enforce timely and secure deprovisioning of access for leavers, including direct intervention where required to mitigate risk.
• Implement and maintain PAM controls including least privilege, JIT access, and privileged session management.
• Ensure identity systems are secure, compliant, and aligned with internal policies and external regulatory requirements.
• Provide advanced support and act as escalation point for IAM and Microsoft security incidents and issues.
• Drive automation of identity processes and integrate IAM solutions with enterprise systems and cloud platforms.
• Identify and deliver enhancements to improve security posture, user experience, and operational efficiency.

Skills

IAM Ownership

PAM

Azure AD

Entra ID

JML governance

Zero Trust

Automation

PowerShell

SAML/OIDC

IGA

BeyondTrust

Tools

BeyondTrust PAM

Entra ID

Azure AD

Ping Identity

SailPoint

Job description

Department: Technical & Security Operations | Location: Bangalore

Reports to: InfoSec Manager | Direct Reports: 0

We're Pentland Brands; a dynamic, global family business, and proud owners and licensees of many iconic active and footwear brands. With a community of over 1,300 team members worldwide, we embrace diversity and inclusion, and champion growth and development. Our success is built on teamwork, courage, innovation, and an unwavering commitment to excellence.

WHAT'S THE MISSION FOR THIS ROLE?

This role acts as the subject matter expert and product owner for IAM and Microsoft security

capabilities, ensuring secure, scalable, and compliant identity services that protect enterprise assets and enable the business. The role combines deep technical expertise with product ownership, driving roadmap, standards, and best practices across identity, access, and Microsoft security tooling. This role has the opportunity to define, implement and own the future IAM strategy

WHAT DOES THIS ROLE DO?

• IAM & PAM Product Ownership - Own the IAM and PAM (Beyond Trust) platforms end-to-end; define roadmap, capabilities, and service improvements aligned to business and security strategy.
• Microsoft Security Ownership - Act as Product Owner for the Microsoft security ecosystem including Entra ID (Azure AD), Microsoft threat detection and protection suite, and identity protection capabilities.
• Access Governance & JML Oversight - Define and oversee joiner, mover, and leaver (JML) processes across HR and IT, ensuring controls are consistently applied and aligned to least privilege principles.
• JML Assurance & Control - Conduct regular audits and control checks to validate that JML processes are operating effectively, with clear ownership of remediation actions where gaps are identified.
• Leaver Management Authority - Maintain authority to enforce timely and secure deprovisioning of access for leavers, including direct intervention where required to mitigate risk.
• Privileged Access Management - Implement and maintain PAM controls including least privilege, JIT access, and privileged session management.
• Security & Compliance - Ensure identity systems are secure, compliant, and aligned with internal policies and external regulatory requirements.
• Operational Support - Provide advanced support and act as escalation point for IAM and Microsoft security incidents and issues.
• Automation & Integration - Drive automation of identity processes and integrate IAM solutions with enterprise systems and cloud platforms.
• Continuous Improvement - Identify and deliver enhancements to improve security posture, user experience, and operational efficiency.

WHAT DO I BRING TO THE ROLE?

• 10-13 years of Relevant Experience in IAM & MS security.
• Microsoft Entra ID (Azure AD) - advanced configuration and identity architecture
• Identity Access Management platform expertise (e.g. Microsoft, Ping, SailPoint, etc)
• Privileged Access Management solutions (e.g. BeyondTrust PAM or equivalent)
• Identity governance and administration (IGA) concepts and tooling
• Authentication (SAML, OAuth, OIDC) and provisioning (SCIM)
• Conditional Access, MFA, and Zero Trust principles
• Automation and scripting (PowerShell, Graph API)
• Integration with SaaS, cloud (Azure), and on-prem identity systems (e.g. AD)
• Working knowledge of security frameworks (e.g. NIST, CIS) and ability to translate controls into practical IAM and Microsoft security configurations
• Microsoft certification related to the aforementioned would be a distinct advantage

We want you to live our company principles, bringing a strong consumer focus, while always

looking for ways to improve and grow in your role. Take ownership of your work and be proactive in solving problems whilst communicating openly and treating everyone with respect and kindness. And, of course, let your creativity shine by bringing your unique style and individuality to the Pentland Brands Team.