Lead Identity and Access Management (IAM) professional

ThoughtFocus; Hyderabad; On-site; INR 1,500,000 - 2,500,000; Full time

Job summary

ESP Engineered is seeking a skilled Lead Identity and Access Management (IAM) professional to enhance our identity and access controls and manage user lifecycle processes. The ideal candidate will have 6+ years in IAM, strong expertise with Saviynt, and knowledge of Workday, Active Directory, and Microsoft Entra ID (Azure AD).

This full-time role involves executing user lifecycle management, administering the Saviynt IGA platform, and automating IAM tasks. Excellent troubleshooting, documentation, and communication skills are required.

Qualifications

• 6+ years of experience in Identity and Access Management or related IT Security roles.
• Hands-on expertise with Saviynt including configuration, rule creation, and policy management.
• Strong knowledge of Workday, Active Directory, and Microsoft Entra ID/Azure AD.

Responsibilities

• Execute end-to-end user lifecycle management and access modifications.
• Administer and support the Saviynt IGA platform.
• Automate tasks and create rules to improve IAM processes.

Skills

Identity and Access Management (IAM)

Saviynt

Workday

Active Directory

Microsoft Entra ID / Azure AD

Automation and scripting

Job description

Lead Identity and Access Management (IAM) professional

6+ Years

Full-Time

We are seeking a skilled and proactive Identity and Access Management (IAM) professional to join our team. This individual will play a key role in executing end-to-end user lifecycle processes, maintaining governance across enterprise systems, and enhancing our identity and access controls.

The ideal candidate will bring hands-on experience with Saviynt, and a strong working knowledge of Workday, Active Directory, and Microsoft Entra ID (Azure AD). This role requires a blend of operational execution, process automation, and analytical problem-solving.

Key Responsibilities

• Execute end-to-end user lifecycle management and access modifications across all systems in coordination with HCM (Workday), business system owners, and IT support teams.
• Administer and support the Saviynt IGA platform, including configuration, connector management, workflows, and certification campaigns.
• Automate manual tasks and create rules to improve efficiency, accuracy, and compliance in access management processes.
• Provide daily operational support, including access troubleshooting, entitlement updates, and policy exceptions.
• Monitor system logs and alerts, escalating anomalies and potential security issues as appropriate.
• Perform periodic access audits and recertifications, ensuring timely remediation of findings.
• Partner with HR, IT, and Security teams to maintain accurate and compliant joiner/mover/leaver processes.
• Support and enhance RBAC and least-privilege models across systems.
• Identify opportunities to streamline IAM workflows and contribute to automation initiatives.
• Support compliance initiatives (e.g., SOX, SOC) and assist with audit requests and reporting.

Qualifications

• 6+ years of experience in Identity and Access Management or related IT Security roles.
• Hands-on expertise with Saviynt, including configuration, rule creation, policy management, and system integrations. Ability to leverage the Saviynt analytics engine to support various use cases such as generating user and access reports, granting or reviewing entitlements, and identifying orphaned or unauthorized (“rogue”) accounts.
• Strong working knowledge of:
• Workday (HCM integration, attribute management)
• Active Directory (user/group administration, LDAP concepts)
• Microsoft Entra ID / Azure AD (conditional access, app registration, SSO)

• Experience executing user lifecycle operations and managing access requests and approvals at scale.
• Familiarity with access certifications, audits, and remediation processes.
• Experience with automation and scripting (SQL, PowerShell) preferred.
• Excellent troubleshooting, documentation, and communication skills.
• Must be able to work standard business hours within the Eastern Time Zone (EST)

Required Skills

Identity and Access Management (IAM) professional; Microsoft Entra ID / Azure AD