Manager - Identity & Access Management (IAM) Service Owner

Davies Shared Services; Pune District; Hybrid; INR 1,400,000 - 2,000,000; Full time

Job summary

Davies Shared Services in Pune seeks an Identity & Access Management Lead to govern IAM services across on-prem and cloud. You will own Active Directory, Entra ID, and certificate management, ensuring least privilege and zero trust.

You will collaborate with Security, Service Desk, Network, and Applications teams to maintain access governance and drive audits. The role requires strong hands-on experience with AD/Entra ID and certificate management, plus experience in lifecycle processes and

Qualifications

• 3–5+ years in IAM, Directory Services, or Security Operations.
• Strong hands-on with Active Directory, Entra ID and certificate management.
• Experience with privileged access, audit requirements and RBAC.

Responsibilities

• Oversee health, performance, and security of onprem AD environments.
• Govern domain controllers, GPOs, OU structure, and replication.
• Ensure AD aligns with zerotrust principles and audit requirements.
• Manage privileged access and admin roles in AD.
• Govern identity lifecycle in Entra ID incl provisioning/deprovisioning.
• Manage conditional access, MFA, SSO integrations, and identity protection features.
• Oversee app registrations, enterprise apps, and federated identity configurations.
• Ensure secure hybrid identity ops (Entra Connect, cloud sync).
• Own joiner/mover/leaver (JML) processes for timely access provisioning.
• Govern privileged access across AD, Entra ID, and critical systems.
• Enforce least-privilege, RBAC, zerotrust with security teams.
• Ensure access reviews, recertifications, and segregation of duties.
• Own certificate lifecycle management and PKI policies.
• Maintain internal PKI infra and certificate authorities.
• Ensure certificates for servers/apps/devices/users are maintained.
• Monitor expiry and automate renewal to prevent outages.
• Ensure identity services comply with policies and audits.
• Maintain audit-ready docs for AD/Entra ID/PKI.
• Support security investigations and risk management.
• Collaborate with application owners for authentication & SSO integration.
• Track identity service performance and compliance metrics.
• Identify opportunities to automate provisioning and reduce incidents.
• Drive improvements across identity services and documentation.
• Provide runbooks and training for service desk on identity processes.

Skills

Identity & Access Management

Active Directory

Entra ID / Azure AD

PKI / Certificate management

RBAC / least privilege

Zero Trust

Audit & Compliance

MFA / SSO

Education

Bachelor’s degree in IT / CS / Cybersecurity

Tools

Entra ID

PKI / CA

AD/Entra Connect

Job description

Department: IT

Employment Type: Permanent - Full Time

Location: Pune

Description

The Manager Identity & Access Management (IAM) Service Owner is responsible for governing, operating, and continuously improving the organisation’s identity and access services across onpremises and cloud environments. This role ensures that users, systems, and applications have the right access at the right time, following the principles of least privilege, zero trust, and regulatory compliance. With ownership of Active Directory (AD), Microsoft Entra ID (Azure AD), and Certificate Management, the Access Management Lead plays a critical role in safeguarding the organisation’s digital identity ecosystem. They oversee identity lifecycle processes, privileged access controls, authentication standards, and certificatebased security, ensuring that access services remain secure, reliable, and aligned with business needs. Reporting into senior IT leadership or the Security/Infrastructure function, this role collaborates closely with Security, Service Desk, Network, and Application teams to maintain strong access governance, support audits, and drive continuous improvement. The successful candidate combines technical depth with service ownership discipline, ensuring that identity and access services underpin a secure and seamless user experience.

Key Responsibilities

• Oversee the health, performance, and security of onpremises AD environments.
• Govern domain controllers, group policies, OU structure, and replication.
• Ensure AD configuration aligns with best practices, zerotrust principles, and audit requirements.
• Manage privileged access within AD, including tiering models and admin roles.
• Govern identity lifecycle processes in Entra ID, including provisioning, deprovisioning, and role assignments.
• Manage conditional access policies, MFA, SSO integrations, and identity protection features.
• Oversee application registrations, enterprise apps, and federated identity configurations.
• Ensure secure hybrid identity operations (Entra Connect, cloud sync, password hash sync).
• Own joiner, mover, leaver (JML) processes and ensure timely, accurate access provisioning.
• Govern privileged access across AD, Entra ID, and critical systems.
• Work with Security to enforce leastprivilege, rolebased access control (RBAC), and zerotrust principles.
• Ensure access reviews, recertifications, and segregationofduties controls are executed.
• Own the organisation’s certificate lifecycle management, including issuance, renewal, and revocation.
• Manage internal PKI infrastructure, certificate authorities, and related policies.
• Ensure certificates for servers, applications, devices, and users are maintained and compliant.
• Prevent outages by proactively monitoring certificate expiry and automating renewal processes.
• Ensure identity and access services comply with internal policies, regulatory standards, and audit requirements.
• Maintain auditready documentation for AD, Entra ID, and PKI.
• Support security teams with identityrelated investigations, vulnerability remediation, and risk management.
• Partner with application owners to integrate systems with AD/Entra ID for authentication and SSO.
• Track and report on identity service performance, access trends, and compliance metrics.
• Identify opportunities to automate provisioning, improve user experience, and reduce accessrelated incidents.
• Drive continuous improvement initiatives across identity services, PKI, and authentication processes. Maintain accurate documentation for identity architecture, access workflows, and certificate processes.
• Ensure runbooks, SOPs, and support guides are up to date and accessible to operational teams. Provide training and guidance to Service Desk and support teams on identity and access processes.

Skills, Knowledge and Expertise

Education

• Bachelor’s degree in IT, Computer Science, Cybersecurity, or equivalent experience.
• ITIL Foundation and relevant Microsoft identity/certificate training preferred.

Experience

• 3–5+ years experience in end-to-end ownership of IAM, Directory Services, or Security Operations.
• Strong handson experience with Active Directory, Microsoft Entra ID, and certificate management/PKI.
• Proven ability to manage identity lifecycle processes, privileged access, and audit requirements.