Lead Engineer – 2 - IAM Analyst

PepsiCo Deutschland GmbH; Hyderabad; On-site; INR 1,200,000 - 2,500,000; Full time

Job summary

PepsiCo Deutschland GmbH is seeking an Identity Management Analyst to own hands-on delivery of non-human identity lifecycle, access governance, and IAM integrations across SaaS and enterprise platforms. You will develop dashboards, perform SQL data analysis, and collaborate with security, cloud, and DevOps teams to strengthen identity controls.

The role emphasizes operational governance for service accounts, API tokens, and workload identities, with a focus on onboarding systems, discovery, and

Qualifications

• 5+ years working with NHI, Secrets Management, PAM, or Machine Identity solutions.
• Experience with discovery and governance platforms such as Veza, Astrix, Akeyless, HashiCorp Vault, CyberArk, Thales CTM
• Experience supporting enterprise-scale security and identity programs
• Strong understanding of Identity lifecycle concepts (JML), Roles, entitlements, access models, Human and non‑human identity & access governance, PAM
• Knowledge of Service Accounts, Service Principals, API Tokens, OAuth Clients, Secrets, SSH Keys, Certificates, Encryption Keys, Workload Identities, Kubernetes Service Accounts, Cloud Managed Identities
• Strong SQL and database experience; Hands-on with IAM roles, managed identities, service accounts, and cloud security controls
• Experience integrating with SAAS and Enterprise platforms like Entra ID, Salesforce, ServiceNow, GitHub, OKTA

Responsibilities

• Manage the full lifecycle of non‑human identities, including Service accounts, Application identities and APIs, bots, and system users
• Integrate NHI data with downstream applications and IAM/IGA platforms to enable risk analysis, reporting and access reviews
• Establish and maintain ownership, purpose, and usage metadata for all non‑human identities
• Identify and analyse high‑risk NHI accounts and remediate orphaned and dormant accounts
• Enable risk‑based reporting and dashboards for NHI, covering privilege levels, access scope, inactivity and ownership gaps
• Partner with application, cloud, and platform teams to support credential governance, including rotation tracking, expiry enforcement and decommissioning of unused identities
• Implement integrations between IAM(NHI) platforms and SaaS applications; work with API-based, file-based or custom connectors
• Troubleshoot failures, data mismatches, and reconciliation issues; support onboarding of new applications into IAM standards
• Build and maintain operational and compliance dashboards for NHI metrics; develop custom reports using SQL
• Perform hands-on SQL querying against IAM databases; collaborate on performance and data quality
• Work with IAM architects to translate designs into configurations; contribute to runbooks and operations docs

Skills

SQL

AWS

Azure

GCP

REST APIs

OAuth

LDAP/AD

Tools

Veza

Astrix

Akeyless

HashiCorp Vault

CyberArk

Thales CTM

Job description

Overview

The Identity Management Analyst is responsible for hands‑on delivery and operationalization of Identity Lifecycle & Access Management (IDM) of non‑human identities (NHI).The role will be responsible for managing NHI platforms, onboarding enterprise systems, operating discovery and governance workflows, maintaining dashboards and reporting, and driving visibility, governance, and remediation of non-human identities across the enterprise.

The individual will work closely with Cloud Engineering, SAAS platforms, DevOps, Security, Infrastructure, Application Development, IAM, Governance, and Platform teams to ensure comprehensive discovery, onboarding, lifecycle management, and access governance of NHI’s including service accounts, API keys, secrets, certificates, service principals, workload identities, and application credentials etc.

Responsibilities

Non‑Human Identity (NHI) Management

• Manage the full lifecycle of non‑human identities, including, Service accounts, Application identities and APIs, bots, and system users
• Integrate NHI data with downstream applications and IAM/IGA platforms to enable: Risk analysis, Reporting and Access reviews
• Establish and maintain ownership, purpose, and usage metadata for all non‑human identities.
• Identify and analyse high‑risk NHI accounts,
• Detect and remediate orphaned and dormant non‑human accounts through:
  • Reconciliation processes
  • Usage and activity analysis
  • Integration with authoritative systems
• Enable risk‑based reporting and dashboards for NHI, covering Privilege levels, Access scope, Last used / inactive accounts, Ownership gaps
• Partner with application, cloud, and platform teams to
  • Support credential governance, including:
  • Rotation tracking
  • Expiry enforcement
  • Decommissioning of unused identities

Integrations & SaaS Connectivity

• Implement integrations between IAM(NHI) platforms and SaaS applications
• Work with API‑based integrations, File‑based or custom connectors where required
• Troubleshoot failures, data mismatches, and reconciliation issues
• Support onboarding of new applications & platforms into IAM standards

Reporting, Dashboards & Data Analysis

• Build and maintain operational and compliance dashboards for NHI metrics.
• Develop custom reports using SQL and IAM reporting frameworks
• Analyse identity data to identify access risk, drift, and anomalies
• Support audit and compliance evidence generation

Database & Technical Operations

• Perform hands‑on SQL querying against IAM databases
• Collaborate with platform teams on performance and data quality improvements

Architecture & Platform Support:

• Work closely with IAM architects to:
  • Translate architecture designs into configurations
  • Validate feasibility during POC’s and pilots
• Contribute to runbooks, and operational documentation

Qualifications

Core IAM Experience

• 5+ years working with NHI, Secrets Management, PAM, or Machine Identity solutions.
• Experience with discovery and governance platforms such as:
• Veza, Astrix, Akeyless, HashiCorp Vault, CyberArk, Thales CTM

• Experience supporting enterprise-scale security and identity programs
• Strong understanding of Identity lifecycle concepts (JML), Roles, entitlements, access models, Human and non‑human identity & access governance, PAM
• Knowledge of Service Accounts, Service Principals, API Tokens, OAuth Clients, Secrets, SSH Keys, Certificates, Encryption Keys, Workload Identities, Kubernetes Service Accounts, Cloud Managed Identities

Technical Skills:

• Strong SQL and database experience (queries, joins, analysis)
• Hands‑on experience with AWS, Azure, Google Cloud Platform (GCP)

• Working Knowledge of IAM Roles, Managed Identities, Service Accounts, Key Management Services, Cloud-native security controls

• Experience integrating with SAAS and Enterprise platforms like Entra ID, Sales force, ServiceNow, GitHub, OKTA etc.
• Strong experience in API & Integration Skills like REST APIs, JSON, OAuth etc.
  • Directory services (LDAP / AD / cloud directories)

Reporting & Analytics:

• Experience building dashboards and operational reports
• Comfortable working with large datasets and identity relationships

Preferred Skills:

• Experience with IAM/IGA tools such as SailPoint, Saviynt, Okta Lifecycle, Entra ID, Ping, or similar
• Understanding of access governance, audit, or SOX controls
• Familiarity with scripting (PowerShell, Python, etc.) for automation