Lead Engineer – 2 - IAM Analyst

PepsiCo Inc.; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

PepsiCo Inc. is seeking an Identity Management Analyst to own the lifecycle and governance of non‑human identities across enterprise systems.

You will work with IAM, security, and cloud teams to onboard applications, implement discovery, and drive remediation for service accounts, API keys, and workload identities. The role emphasizes hands‑on IDM delivery, dashboards, and reporting, with focus on risk analysis, access governance, and integration with SaaS platforms.

Qualifications

• Experience with NHI, Secrets Management, PAM, or Machine Identity solutions.
• Experience with discovery and governance platforms such as Veza, Astrix, Akeyless, HashiCorp Vault, CyberArk, Thales CTM
• Knowledge of Identity lifecycle concepts (JML), Roles, entitlements, access models, and PAM.
• Experience with Service Accounts, Service Principals, API Tokens, OAuth Clients, Secrets, SSH Keys, Certificates.

Responsibilities

• Manage full lifecycle of non‑human identities (NHI).
• Integrate NHI data with IAM/IGA platforms for risk analysis and governance.
• Establish ownership and usage metadata for NHI.
• Enable risk‑based reporting and dashboards for NHI metrics.
• Perform SQL querying against IAM databases and collaborate on data quality.
• Translate designs into configurations and contribute to runbooks.

Skills

IAM

Python

SQL

REST APIs

OAuth 2.0

OpenID Connect

Kubernetes

CI/CD

AWS

Azure

GCP

GitHub

Entra ID

Tools

GitHub Actions

Azure DevOps

Jenkins

GitLab CI

HashiCorp Vault

AWS Secrets Manager

Job description

Overview

The Identity Management Analyst is responsible for hands‑on delivery and operationalization of Identity Lifecycle & Access Management (IDM) of non‑human identities (NHI).The role will be responsible for managing NHI platforms, onboarding enterprise systems, operating discovery and governance workflows, maintaining dashboards and reporting, and driving visibility, governance, and remediation of non-human identities across the enterprise.

The individual will work closely with Cloud Engineering, SAAS platforms, DevOps, Security, Infrastructure, Application Development, IAM, Governance, and Platform teams to ensure comprehensive discovery, onboarding, lifecycle management, and access governance of NHI’s including service accounts, API keys, secrets, certificates, service principals, workload identities, and application credentials etc.

Responsibilities

Non‑Human Identity (NHI) Management

• Manage the full lifecycle of non‑human identities, including, Service accounts, Application identities and APIs, bots, and system users
• Integrate NHI data with downstream applications and IAM/IGA platforms to enable: Risk analysis, Reporting and Access reviews
• Establish and maintain ownership, purpose, and usage metadata for all non‑human identities.
• Identify and analyse high‑risk NHI accounts
• Enable risk‑based reporting and dashboards for NHI, covering Privilege levels, Access scope, Last used / inactive accounts, Ownership gaps

Integrations & SaaS Connectivity

• Implement integrations between IAM(NHI) platforms and SaaS applications
• Work with API‑based integrations, File‑based or custom connectors where required
• Troubleshoot failures, data mismatches, and reconciliation issues
• Support onboarding of new applications & platforms into IAM standards

Reporting, Dashboards & Data Analysis

• Build and maintain operational and compliance dashboards for NHI metrics.
• Develop custom reports using SQL and IAM reporting frameworks
• Analyse identity data to identify access risk, drift, and anomalies
• Support audit and compliance evidence generation

Database & Technical Operations

• Perform hands‑on SQL querying against IAM databases
• Collaborate with platform teams on performance and data quality improvements

Architecture & Platform Support:

• Work closely with IAM architects to:
  • Translate architecture designs into configurations
  • Validate feasibility during POC’s and pilots
• Contribute to runbooks, and operational documentation

Qualifications

Core IAM Experience

• Working with NHI, Secrets Management, PAM, or Machine Identity solutions.
• Experience with discovery and governance platforms such as:
• Veza, Astrix, Akeyless, HashiCorp Vault, CyberArk, Thales CTM
• Experience supporting enterprise-scale security and identity programs
• Strong understanding of Identity lifecycle concepts (JML), Roles, entitlements, access models, Human and non‑human identity & access governance, PAM
• Knowledge of Service Accounts, Service Principals, API Tokens, OAuth Clients, Secrets, SSH Keys, Certificates, Encryption Keys, Workload Identities, Kubernetes Service Accounts, Cloud Managed Identities

Technical Skills:

• Strong SQL and database experience (queries, joins, analysis)
• Hands‑on experience with AWS, Azure, Google Cloud Platform (GCP)
• Working Knowledge of IAM Roles, Managed Identities, Service Accounts, Key Management Services, Cloud‑native security controls
• Experience integrating with SAAS and Enterprise platforms like Entra ID, Sales force, ServiceNow, GitHub, OKTA etc.
• Strong experience in API & Integration Skills like REST APIs, JSON, OAuth etc.
• Directory services (LDAP / AD / cloud directories)

Reporting & Analytics:

• Experience building dashboards and operational reports
• Comfortable working with large datasets and identity relationships

Qualifications:

Core Engineering & Cloud Experience

• 5+ years of experience in software engineering, cloud platform development, DevSecOps, or platform engineering roles.
• Strong hands‑on programming experience with Python and experience developing enterprise‑grade automation, microservices, APIs, and cloud‑native applications.
• Experience building and maintaining CI/CD pipelines using GitHub Actions, Azure DevOps, Jenkins, GitLab CI, or similar platforms.
• Strong understanding of GitHub, source control management, branching strategies, code reviews, and Infrastructure as Code (IaC) practices.
• Experience working with multi‑cloud environments including AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Strong understanding of non‑human identities and machine credentials including:
• Service Accounts, Service Principals, Managed Identities, API Keys, OAuth Clients, Tokens, Secrets, SSH Keys, Certificates, Encryption Keys, Workload Identities, Kubernetes Service Accounts
• Experience integrating cloud‑native secret management solutions such as:
• Azure Key Vault, AWS Secrets Manager, AWS KMS, Google Secret Manager, HashiCorp Vault
• Understanding of secure software development lifecycle (SDLC), DevSecOps practices, and cloud security fundamentals.

Technical Skills

• Advanced Python development skills with experience building automation frameworks, SDKs, APIs, and integration services.
• Strong experience with REST APIs, OAuth 2.0, OpenID Connect, JSON, and event‑driven integrations.
• Hands‑on experience with cloud‑native services including IAM, networking, storage, compute, serverless, and container platforms.
• Experience with containerization and orchestration technologies such as Docker, Kubernetes, EKS, AKS, or GKE.
• Experience managing cloud identities and machine credentials across multiple accounts, subscriptions, projects, and tenants.
• Working knowledge of:
• AWS IAM Roles, Azure Identities, Azure Service Principals, GCP Service Accounts, Cloud KMS and Secret Management services
• Experience integrating enterprise platforms such as GitHub, Azure DevOps, ServiceNow, Entra ID, Okta, Salesforce, and cloud‑native services.
• Experience leveraging AI‑assisted development tools such as GitHub Copilot, OpenAI APIs, or cloud AI services is a plus.