Lead Engineer - Non-human Identity Management

Cencora; Maharashtra; On-site; INR 4,000,000 - 6,500,000; Full time

Job summary

Cencora seeks a Lead Engineer – IAM to drive large, complex Identity and Access Management initiatives across the business, aiming to improve security and enable aggressive growth. The role focuses on Non-Human Identity Management and privileged access controls.

You will partner with Finance, Legal and Audit to support internal and external audits (SOX, COBIT) and implement enterprise security standards. Strong leadership and certifications are required.

Qualifications

• Bachelor's degree or equivalent in CS/IT/Cybersecurity.
• 10+ years IT/security experience with IAM focus.
• 5+ years designing and deploying enterprise IAM solutions.
• Experience managing NHIs in a large enterprise.
• Experience with IAM/PAM products and related tooling.
• Led technical teams and implemented security frameworks.
• Relevant certifications such as CISA/CISM/CISSP.

Responsibilities

• Lead design, implementation and management of PAM services across on-prem and cloud.
• Drive Non-Human Identity Management (NHIM) initiatives.
• Evaluate IAM product suites for risk and strategic value.
• Develop security standards and governance to protect assets.
• Ensure IAM programs meet policies, change control, and IT risk/compliance.
• Collaborate with Finance, Legal, Audit for IAM-related controls and audits.
• Support risk, regulatory guidance and governance across IT projects.

Skills

IAM

Security leadership

Privileged Access Management

Risk management

Auditing

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

CISA

CISM

CISSP

ISO 27001

COBIT

ITIL

NIST

PCI

Tools

BeyondTrust PAM

Azure Entra

Active Directory

Linux

PowerShell

SIEM

Job description

Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere.

Job Details

Position Overview

The Lead Engineer – IAM will deliver and manage large and complex Identity and Access Management initiatives across the business with the goals of improving efficiency, increasing security posture, and supporting aggressive growth. The Lead Engineer will be expected to work in the Non-Human Identity Management space.

Key Responsibilities

• Drive the design, implementation and management of Privileged Access Management Services which includes management of privileged accounts, secure access to Cencora resources (on premise and in the cloud), secure management of credentials, session management, zero standing privilege model, just-in-time privilege access and Identity & Access Analytics.
• Drive and manage Non-Human Identity Management (NHIM).
• Understand a variety of IAM-related product suites and tools to make critical operational and strategic decisions with a focus on NHI discovery, ownership attestation and risk reduction.
• Lead the development and implementation of prudent enterprise security standards, guidelines and procedures to protect the integrity, availability and privacy of all corporate information assets.
• Ensure Identity and Access Management Services follow appropriate policies, procedures, operational considerations, IT change control, and IT risk and compliance management programs.
• Directly partner with the enterprise Finance, Legal, Audit and Compliance executives to support Internal and External Audits relating to IAM (SOX, COBIT, IT Controls)
• Working with ISO Risk Organization, supporting the Business Unit and IT executives through the process of prioritizing security initiatives and spending based on relevant business risk and regulatory compliance issues, financial implications, and alignment with the corporate strategic plan.
• Support strategic and tactical security, risk mitigation and regulatory compliance guidance for all IT projects, including the evaluation of enterprise policies, processes, operating procedures and governance controls

This job profile description is a standardized, non-contractual reference description and global reference tool provided for organizational consistency and talent architecture purposes across Cencora. It does not alter actual job duties, responsibilities, reporting lines, working conditions, grading, compensation, or other essential terms and conditions of employment. Actual duties and responsibilities may vary based on business needs, local requirements, and operational practices. Where a team member’s role is governed by an employment agreement, local terms and conditions, prior job description or collective bargaining agreement, those documents shall prevail in case of any inconsistency. Mandatory local laws shall also prevail.

Required Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, software engineering, or a related field, or equivalent experience.
• Typically requires 10+ years of combined IT and security work experience with a broad range of exposure to Identity and Access Management functions with a focus on Privileged Access Management and over 5 years’ experience designing and deploying Identity and Access Management solutions at the enterprise level.
• Experience managing NHIs in a large and complex enterprise.
• Experience designing, managing and supporting IAM and PAM products: BeyondTrust Password Safe, BeyondTrust Endpoint Privilege Management (EPM), BeyondTrust Privileged Remote Access, SSH Key Management, MFA, SIEM, Azure Entra, Active Directory, Linux, PowerShell scripts, etc.
• Experience leading technical teams in a large and complex environment to deliver related capabilities and services.
• Demonstrated successful implementation of security control frameworks and standards such as ISO 27001, ISO 17799, COBIT, ITIL, NIST and PCI.
• Certification in Information Security relevant areas such as Audit (CISA), Security Management (CISM), Security Professional (CISSP) and/or equivalent business experience in a matrix Organization required.

What Cencora offers

• Benefit offerings outside the US may vary by country and will be aligned to local market practice. The eligibility and effective date may differ for some benefits and for team members covered under collective bargaining agreements.

Full time

Affiliated Companies

Affiliated Companies: CENCORA BUSINESS SERVICES INDIA PRIVATE LIMITED

Equal Employment Opportunity

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law.

The company’s continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non-discriminatory.

Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email [e-mail]. We will make accommodation determinations on a request‑by‑request basis. Messages and emails regarding anything other than accommodations requests will not be returned