Lead IAM Engineer

NB Healthcare Technologies; Hyderabad; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

NationsBenefits in Hyderabad is seeking a Lead IAM Engineer to drive identity and access governance across Azure AD/Entra ID, with a focus on UKG HRIS integration and Zero Trust controls.

You will design and implement JML automation, RBAC/ABAC models, and stay aligned with HITRUST, HIPAA, SOC 2, and PCI DSS requirements while collaborating with HR, IT, and Security teams.

Qualifications

• Bachelor's degree in CS or Information Security.
• 8-10 years of IAM or IT Security experience.
• Experience integrating Microsoft Entra ID with HRIS platforms (preferably UKG).
• Background in IAM governance and automation in compliance-heavy environments.

Responsibilities

• Lead IAM governance and automation initiatives across Entra ID and HRIS integrations.
• Automate Joiner-Mover-Leaver (JML) workflows and lifecycle events.
• Manage Privileged Identity Management, access reviews, and Conditional Access policies.
• Map IAM controls to compliance frameworks (NIST, HIPAA, SOC 2, PCI DSS).
• Prepare evidence and documentation to support audits.

Skills

Azure AD / Entra ID

PIM & Access Reviews

RBAC/ABAC

JML Automation

Scripting with PowerShell

Education

Bachelors in Computer Science or Information Security

Tools

Graph API

AzureAD

MSOnline

Az modules

Intune

Job description

Job Title: Lead IAM Engineer

Department: Cyber Security - IAM

Location: Hyderabad, India

Employment Type: Full-time

About NationsBenefits:

At NationsBenefits, we are leading the transformation of the insurance industry by developing innovative benefits management solutions. We focus on modernizing complex back-office systems to create scalable, secure, and high-performing platforms that streamline operations for our clients. As part of our strategic growth, we are focused on platform modernization transitioning legacy systems to modern, cloud-native architectures that support the scalability, reliability, and high performance of core back-office functions in the insurance domain.

Role Overview:

We are seeking a detail-oriented and self-driven IAM Automation and Governance Specialist to enhance and automate our identity and access management (IAM) practices. The role will be primarily focused on integrating Microsoft Entra ID (Azure AD) with UKG (HRIS) systems, ensuring secure identity lifecycle management aligned with Zero Trust, least privilege, and regulatory compliance (HITRUST, HIPAA, SOC 2, PCI DSS).

Key Responsibilities:

Identity & Access Management:

• Expert-level experience with Microsoft Entra ID (Azure AD)
• Hands-on with Entitlement Management: Access Packages, Catalogs
• Proficient in Privileged Identity Management (PIM), Access Reviews, Conditional Access
• Automate Joiner-Mover-Leaver (JML) workflows and user lifecycle events
• Identify and remediate orphaned accounts and over-permissioned users
• Strong understanding of RBAC and ABAC access control models

Scripting & Automation:

• Strong proficiency in PowerShell (Graph API, AzureAD, MSOnline, Az modules)
• Ability to automate:
• IAM data exports (e.g., PIM assignments, access packages)
• Sign-in & activity log queries
• Provisioning/Deprovisioning tasks
• Knowledge of modular and maintainable scripting best practices

Security & Compliance:

• Understanding of frameworks: NIST 800-53, HIPAA, SOC 2, PCI DSS
• Ability to map IAM controls to compliance framework
• Experience supporting audits through evidence gathering and documentation

Azure Cloud & Microsoft Ecosystem:

• Manage Azure subscriptions, resource groups, and RBAC
• Experience with Intune, Defender for Endpoint, and Company Portal
• Troubleshoot Conditional Access and authentication issues
• Familiarity with Microsoft 365 Security & Compliance Center

Documentation & Process Management:

• Develop SOPs, process flows, and policy documents
• Create and maintain IAM maturity models and strategic roadmaps
• Prepare documentation to support regulatory audits

Key Competencies:

• Process Automation: Streamline IAM operations through scripting and workflows
• Security Focus: Deep understanding of IAM security challenges and solutions
• Analytical Thinking: Ability to evaluate and improve access control models
• Cross-functional Collaboration: Bridge gaps between technical and business functions
• Regulatory Awareness: Strong foundation in data protection, access control standards, and compliance regulations

Soft Skills:

• Self-motivated and capable of working independently
• Strong attention to detail with a security-first mindset
• Excellent communication skills for technical and non-technical stakeholders
• Strong collaboration across HR, IT, Security, and DevOps teams

Education & Experience:

• Bachelors in computer science, Information Security, or related field
• 810 years of experience in IAM or IT Security
• Experience integrating Microsoft Entra ID with HRIS platforms (preferably UKG)
• Background in IAM governance and automation in compliance-heavy environments

Preferred Certifications:

• Microsoft Identity and Access Administrator
• CISSP / CISM (or equivalent)
• Azure Security Engineer Associate