Lead Engineer - Non-human Identity Management

CENCORA BUSINESS SERVICES INDIA PRIVATE LIMITED; Pune District; On-site; INR 3,500,000 - 6,500,000; Full time

Job summary

Cencora Business Services India Private Limited in Pune seeks a Lead Engineer – IAM to deliver and manage large Identity and Access Management initiatives across the business, aiming to improve security posture and support aggressive growth in the Non-Human Identity Management space.

You will design and implement Privileged Access Management, lead NHIM programs, align with ISO/NIST standards, collaborate with Finance, Legal and Audit, and guide teams through complex IAM solutions in a global,

Qualifications

• Bachelor's degree in CS/IT/cybersecurity or equivalent experience.
• 10+ years IT and security experience with IAM/PAM focus.
• Experience managing NHIs in a large enterprise.
• Experience designing, deploying IAM and PAM products (BeyondTrust suite, SSH, MFA, etc.).
• Experience leading technical teams in large environments.
• Security framework certifications (CISA/CISM/CISSP) or equivalent experience.

Responsibilities

• Drive design, implementation and management of Privileged Access Management Services.
• Drive and manage Non-Human Identity Management (NHIM).
• Understand IAM product suites to inform decisions on NHIM discovery and risk reduction.
• Develop and implement enterprise security standards and procedures.
• Ensure IAM services follow policies, change control and IT risk/compliance programs.
• Partner with Finance, Legal, Audit to support IAM-related audits (SOX, COBIT, IT Controls).
• Support prioritization of security initiatives with ISO risk organization and executives.

Skills

IAM

PAM

Non-Human Identity Management

Security architecture

Team leadership

Education

Bachelor's degree or equivalent

Tools

BeyondTrust Password Safe

BeyondTrust Endpoint Privilege Management

BeyondTrust Privileged Remote Access

SSH Key Management

MFA

SIEM

Azure Entra

Active Directory

Linux

PowerShell

Job description

Position Overview

The Lead Engineer – IAM will deliver and manage large and complex Identity and Access Management initiatives across the business with the goals of improving efficiency, increasing security posture, and supporting aggressive growth. The Lead Engineer will be expected to work in the Non-Human Identity Management space.

This job profile description is a standardized, non-contractual reference description and global reference tool provided for organizational consistency and talent architecture purposes across Cencora. It does not alter actual job duties, responsibilities, reporting lines, working conditions, grading, compensation, or other essential terms and conditions of employment. Actual duties and responsibilities may vary based on business needs, local requirements, and operational practices. Where a team member's role is governed by an employment agreement, local terms and conditions, prior job description or collective bargaining agreement, those documents shall prevail in case of any inconsistency. Mandatory local laws shall also prevail.

Key Responsibilities

• Drive the design, implementation and management of Privileged Access Management Services which includes management of privileged accounts, secure access to Cencora resources (on premise and in the cloud), secure management of credentials, session management, zero standing privilege model, just-in‑time privilege access and Identity & Access Analytics.
• Drive and manage Non-Human Identity Management (NHIM).
• Understand a variety of IAM-related product suites and tools to make critical operational and strategic decisions with a focus on NHI discovery, ownership attestation and risk reduction.
• Lead the development and implementation of prudent enterprise security standards, guidelines and procedures to protect the integrity, availability and privacy of all corporate information assets.
• Ensure Identity and Access Management Services follow appropriate policies, procedures, operational considerations, IT change control, and IT risk and compliance management programs.
• Directly partner with the enterprise Finance, Legal, Audit and Compliance executives to support Internal and External Audits relating to IAM (SOX, COBIT, IT Controls).
• Working with ISO Risk Organization, supporting the Business Unit and IT executives through the process of prioritizing security initiatives and spending based on relevant business risk and regulatory compliance issues, financial implications, and alignment with the corporate strategic plan.
• Support strategic and tactical security, risk mitigation and regulatory compliance guidance for all IT projects, including the evaluation of enterprise policies, processes, operating procedures and governance controls.

Required Qualifications

• Bachelor's degree in computer science, information technology, cybersecurity, software engineering, or a related field, or equivalent experience.
• Typically requires 10+ years of combined IT and security work experience with a broad range of exposure to Identity and Access Management functions with a focus on Privileged Access Management and over 5 years’ experience designing and deploying Identity and Access Management solutions at the enterprise level.
• Experience managing NHIs in a large and complex enterprise.
• Experience designing, managing and supporting IAM and PAM products: BeyondTrust Password Safe, BeyondTrust Endpoint Privilege Management (EPM), BeyondTrust Privileged Remote Access, SSH Key Management, MFA, SIEM, Azure Entra, Active Directory, Linux, PowerShell scripts, etc.
• Experience leading technical teams in a large and complex environment to deliver related capabilities and services.
• Demonstrated successful implementation of security control frameworks and standards such as ISO 27001, ISO 17799, COBIT, ITIL, NIST and PCI.
• Certification in Information Security relevant areas such as Audit (CISA), Security Management (CISM), Security Professional (CISSP) and/or equivalent business experience in a matrix Organization required.

What Cencora offers

Benefit offerings outside the US may vary by country and will be aligned to local market practice. The eligibility and effective date may differ for some benefits and for team members covered under collective bargaining agreements.

Full time Affiliated Companies

Affiliated Companies: CENCORA BUSINESS SERVICES INDIA PRIVATE LIMITED

Equal Employment Opportunity

Cencora is committed to providing equal employment opportunity without regard to race, color, religion, sex, sexual orientation, gender identity, genetic information, national origin, age, disability, veteran status or membership in any other class protected by federal, state or local law. The company's continued success depends on the full and effective utilization of qualified individuals. Therefore, harassment is prohibited and all matters related to recruiting, training, compensation, benefits, promotions and transfers comply with equal opportunity principles and are non‑discriminatory. Cencora is committed to providing reasonable accommodations to individuals with disabilities during the employment process which are consistent with legal requirements. If you wish to request an accommodation while seeking employment, please call 888.692.2272 or email [e-mail]. We will make accommodation determinations on a request‑by‑request basis. Messages and emails regarding anything other than accommodations requests will not be returned.

Cencora does not request this information as part of the employment application.