Lead Identity and Access Management (IAM) professional

ThoughtFocus; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

ThoughtFocus is seeking a skilled Identity and Access Management professional in Bengaluru, Karnataka. This role involves executing user lifecycle management, supporting the Saviynt platform, and enhancing identity controls. The ideal candidate will have over 6 years of experience, hands-on expertise with Saviynt, and strong knowledge of Workday, Active Directory, and Azure AD. Excellent problem-solving skills and familiarity with compliance initiatives are essential.

Qualifications

• 6+ years of experience in Identity and Access Management or related IT Security roles.
• Hands-on expertise with Saviynt including configuration, rule creation, and system integrations.
• Strong working knowledge of Workday, Active Directory, and Microsoft Entra ID.

Responsibilities

• Execute end-to-end user lifecycle management and access modifications.
• Administer and support the Saviynt IGA platform.
• Automate manual tasks and create rules to improve efficiency.
• Monitor system logs and alerts.
• Partner with HR, IT, and Security teams.

Skills

Saviynt

Workday

Active Directory

Microsoft Entra ID (Azure AD)

Automation and scripting

Job description

We are seeking a skilled and proactive Identity and Access Management (IAM) professional to join our team. This individual will play a key role in executing end-to-end user lifecycle processes, maintaining governance across enterprise systems, and enhancing our identity and access controls.

The ideal candidate will bring hands‑on experience with Saviynt, and a strong working knowledge of Workday, Active Directory, and Microsoft Entra ID (Azure AD). This role requires a blend of operational execution, process automation, and analytical problem‑solving.

Key Responsibilities

• Execute end-to-end user lifecycle management and access modifications across all systems in coordination with HCM (Workday), business system owners, and IT support teams.
• Administer and support the Saviynt IGA platform, including configuration, connector management, workflows, and certification campaigns.
• Automate manual tasks and create rules to improve efficiency, accuracy, and compliance in access management processes.
• Provide daily operational support, including access troubleshooting, entitlement updates, and policy exceptions.
• Monitor system logs and alerts, escalating anomalies and potential security issues as appropriate.
• Perform periodic access audits and recertifications, ensuring timely remediation of findings.
• Partner with HR, IT, and Security teams to maintain accurate and compliant joiner/mover/leaver processes.
• Support and enhance role‑based access control (RBAC) and least‑privilege models across systems.
• Identify opportunities to streamline IAM workflows and contribute to automation initiatives.
• Support compliance initiatives (e.g., SOX, SOC) and assist with audit requests and reporting.

Qualifications

• 6+ years of experience in Identity and Access Management or related IT Security roles.
• Hands‑on expertise with Saviynt, including configuration, rule creation, policy management, and system integrations. Ability to leverage the Saviynt analytics engine to support various use cases such as generating user and access reports, granting or reviewing entitlements, and identifying orphaned or unauthorized ("rogue") accounts.
• Strong working knowledge of:
  • Workday (HCM integration, attribute management)
  • Active Directory (user/group administration, LDAP concepts)
  • Microsoft Entra ID / Azure AD (conditional access, app registration, SSO).
• Experience executing user lifecycle operations and managing access requests and approvals at scale.
• Familiarity with access certifications, audits, and remediation processes.
• Experience with automation and scripting (SQL, PowerShell) preferred.
• Excellent troubleshooting, documentation, and communication skills.
• Must be able to work standard business hours within the Eastern Time Zone (EST).