Senior Analyst, Identity & Access Management (IAM)

Art Technology and Software India Pvt Ltd; Ernakulam; On-site; INR 1,500,000 - 2,300,000; Full time

Job summary

Art Technology and Software India Pvt Ltd is seeking a Cloud Security - Identity & Access Management (IAM) Senior Analyst to strengthen enterprise identity security and access governance from Infopark, Kochi. The role focuses on Entra ID, AD, and hybrid identity with an emphasis on PAM and risk-aware access controls.

The candidate will implement MFA, CA, and identity protection, manage SSO via SAML/OIDC, and drive identity automation using PowerShell across enterprise apps and VPN/VDI

Qualifications

• 4+ years of experience in Cybersecurity and IAM.
• Strong hands-on experience with Microsoft Entra ID and Hybrid Identity Architecture.
• Experience managing Active Directory, Group Policies, Users, Groups, and OUs.
• Hands-on experience with Microsoft Entra Connect (Azure AD Connect).
• Strong understanding of Identity Governance, Access Reviews, and User Access Recertification.
• Experience with PIM, JIT Access, and privileged identity controls.
• Knowledge of authentication and identity technologies including SAML, OAuth, OpenID Connect (OIDC), LDAP, and Federation Services.
• Experience onboarding and integrating enterprise applications with Microsoft Entra ID.
• Knowledge of phishing-resistant authentication technologies such as FIDO2, WebAuthn, Passkeys, Windows Hello for Business, Certificate-Based Authentication, and Smart Cards.
• Strong troubleshooting skills for identity and access management issues.
• Experience with PowerShell scripting and automation.
• Knowledge of service accounts, managed identities, gMSA, certificates, and machine identity management.

Responsibilities

• Administer and support Microsoft Entra ID (Azure AD), Active Directory, and hybrid identity environments.
• Manage user lifecycle processes including provisioning, modifications, deprovisioning, and access governance.
• Configure and maintain Microsoft Entra Connect (Azure AD Connect) and hybrid identity synchronization.
• Implement and manage Conditional Access, MFA, Authentication Strength Policies, Identity Protection, and Privileged Identity Management (PIM).
• Conduct access reviews, user access recertification, and identity governance activities.
• Support and maintain SSO integrations using SAML, OAuth, OIDC, and LDAP protocols.
• Implement and manage Just-in-Time (JIT) privileged access and privileged account controls.
• Support PAM integrations and enterprise privileged access solutions.
• Troubleshoot authentication, authorization, directory synchronization, and identity related issues.
• Automate identity administration tasks using PowerShell.
• Support identity integrations for enterprise applications, VPN/ZTNA solutions, VDI/RDP environments, and endpoints.
• Monitor identity-related security events, audit logs, and SIEM integrations.
• Collaborate with Infrastructure, Security, SOC, PAM, Application, and business teams on IAM initiatives.
• Develop and maintain operational procedures, technical documentation, and support runbooks.
• Participate in incident, problem, and change management activities and provide escalation/on-call support when required.

Skills

Microsoft Entra ID

Hybrid Identity

Identity Governance

PIM

JIT Access

PowerShell

SAML

OAuth

OIDC

LDAP

Federation

Tools

Azure AD Connect

Azure AD

Job description

Job Title: Cloud security - Identity & Access Management (IAM) Senior analyst
Experience: 4-8 Years
Location: Infopark, Kochi (Work from Office)

Role Overview

We are seeking a highly skilled Senior Analyst - Identity & Access Management (IAM) to support and enhance enterprise identity security, access governance, and privileged access management capabilities. The ideal candidate will have strong expertise in Microsoft Entra ID, Active Directory, Hybrid Identity, Identity Governance, and Privileged Access Management while ensuring secure and compliant user access across the organization.

Key Responsibilities

• Administer and support Microsoft Entra ID (Azure AD), Active Directory, and hybrid
  identity environments.
• Manage user lifecycle processes including provisioning, modifications, deprovisioning,
  and access governance.
• Configure and maintain Microsoft Entra Connect (Azure AD Connect) and hybrid
  identity synchronization.
• Implement and manage Conditional Access, MFA, Authentication Strength Policies,
  Identity Protection, and Privileged Identity Management (PIM).
• Conduct access reviews, user access recertification, and identity governance activities.
• Support and maintain SSO integrations using SAML, OAuth, OIDC, and LDAP
  protocols.
• Implement and manage Just-in-Time (JIT) privileged access and privileged account
  controls.
• Support PAM integrations and enterprise privileged access solutions.
• Troubleshoot authentication, authorization, directory synchronization, and identity
  related issues.
• Automate identity administration tasks using PowerShell.
• Support identity integrations for enterprise applications, VPN/ZTNA solutions, VDI/RDP
  environments, and endpoints.
• Monitor identity-related security events, audit logs, and SIEM integrations.
• Collaborate with Infrastructure, Security, SOC, PAM, Application, and business teams on
  IAM initiatives.
• Develop and maintain operational procedures, technical documentation, and support
  runbooks.
• Participate in incident, problem, and change management activities and provide
  escalation/on-call support when required.

Required Skills & Experience

• 4+ years of experience in Cybersecurity and Identity & Access Management (IAM).
• Strong hands-on experience with Microsoft Entra ID and Hybrid Identity Architecture.
• Experience managing Active Directory, Group Policies, Users, Groups, and
  Organizational Units (OUs).
• Hands-on experience with Microsoft Entra Connect (Azure AD Connect).
• Strong understanding of Identity Governance, Access Reviews, and User Access
  Recertification.
• Experience with PIM, JIT Access, and privileged identity controls.
• Knowledge of authentication and identity technologies including SAML, OAuth, OpenID
  Connect (OIDC), LDAP, and Federation Services.
• Experience onboarding and integrating enterprise applications with Microsoft Entra ID.
• Knowledge of phishing-resistant authentication technologies such as FIDO2, WebAuthn,
  Passkeys, Windows Hello for Business, Certificate-Based Authentication, and Smart
  Cards.
• Strong troubleshooting skills for identity and access management issues.
• Experience with PowerShell scripting and automation.
• Knowledge of service accounts, managed identities, gMSA, certificates, and machine
  identity management.
• Excellent analytical, communication, stakeholder management, and documentation skills.

Preferred Qualifications

• Experience with enterprise PAM solutions.
• Exposure to SIEM platforms and identity security monitoring.
• Relevant Microsoft security or identity certifications are an added advantage.