Senior Cyber Security IAM Analyst

OneAdvanced; Bengaluru; On-site; INR 1,800,000 - 3,000,000; Full time

Benefits offered by this job

Wellbeing focused

Annual Leave 20 days

Employee Assistance Programme

Personal Growth Programs

Online Learning Platform SkillsHub

Life Insurance 3x annual salary

Personal Accident Insurance

Performance Bonus

Job summary

OneAdvanced is seeking an experienced IAM/PAM lead to design, implement, and govern a next-generation PAM capability. You will collaborate with CTO stakeholders to select tools, build processes, and secure privileged access for human and AI identities.

You will also manage IAM operations across AD/LDAP/Entra, enforce access policies, and help drive governance, risk, and audits within a large, security‑driven environment.

Qualifications

• 6+ years in Identity and Access Management with PAM focus.
• Hands-on vault administration, rotation, and session management.
• Experience building out PAM capability with tools and processes.
• BA/BS in computer science or related field.
• Relevant certs in Windows/Azure/AD and AWS desirable.

Responsibilities

• Design, build, and deploy a next-generation PAM capability.
• Implement PAM tool and supporting processes, standards, and controls.
• Extend access controls to non-human/AI identities and doJust-in-time access.
• Automate PAM operations like rotation, monitoring, and vault hygiene.
• Governing PAM policy and advising teams across the business.
• Manage IAM systems including AD, LDAP, Entra; handle access requests.

Skills

PAM

Identity and Access Management

Active Directory

Entra

LDAP

Azure

PowerShell

Python

Ruby

AWS

Education

Bachelor's degree in CS/IT or related

Tools

CyberArk

SailPoint

Okta

Job description

Join OneAdvanced

At OneAdvanced, we develop and host multiple software products and manage a large technical infrastructure spanning Public Cloud, Private Cloud, and on-premise data centres. We are building an AI-first business, and we invest heavily in security and engineering to build, run, and protect our products and customer data with confidence.

This role sits withinour Identity and Access Management (IAM) function and reports to the Director of IAM. It is central to a major investment for us: the design, build, and deployment of our next-generation Privileged Access Management (PAM) capability. Working closely with technical stakeholders across the CTO organisation, you will help select and implement a new PAM tool and the processes and controls that surround it — including how we secure privileged access for the non-human and agentic AI identities that increasingly run in our environment. As the capability matures, you will grow into the subject-matter expert who supports and governs privileged access across the company.

What You Will Do

Privileged Access Management (primary focus)

• Help design, build out, and deploy our next-generation PAM capability, from tool selection through to production rollout.
• Partner with technical stakeholders across the CTO organisation to implement the new PAM tool and the supporting processes, standards, and controls.
• Extend privileged access controls to non-human and agentic AI identities, securing the credentials, secrets, and just-in-time access these workloads depend on.
• Execute and progressively automate core PAM operations, including credential rotation, privileged session monitoring, and vault hygiene.
• Grow into the subject-matter expert for PAM, helping to govern privileged access policy and standards and advising teams across the business.

Identity and Access Management Operations

• Implement and manage identity and access control systems across key strategic platforms, including Active Directory, LDAP, and Entra.
• Manage user accounts, groups, and permissions across the IAM system.
• Grant or deny day-to-day access requests based on user role and privilege, ensuring the right people have access to the right resources.
• Work with internal customers, business analysts, and application teams to understand and implement access requirements.
• Configure and enforce access policies and procedures.
• Monitor user activity across the IAM system and investigate anomalies.
• Collaborate with internal teams to deliver access control initiatives aligned with corporate security policy and compliance standards.
• Troubleshoot IAM-related issues and design effective solutions.
• Provide expert guidance on IAM tools, technologies, and best practice.
• Integrate IAM solutions seamlessly into the broader IT infrastructure.
• Support the operational lifecycle of non-human and agentic identities, including authentication, authorisation, monitoring, and de-provisioning.
• Support evaluation and adoption of IAM tooling and automation to reduce manual administration.
• Support IAM risk and control activities, including evidence gathering for internal and external audits (e.g. ISO 27001).
• Document IAM processes and procedures.

Identity Governance and Administration Support

• Run access certification campaigns, process joiner-mover-leaver requests, and remediate dormant or orphaned accounts.
• Maintain the entitlement catalogue and flag gaps or anomalies to IAM leadership.

Reporting and Continuous Improvement

• Develop, monitor, and report on IAM, PAM, and IGA metrics and KPIs, and prepare clear, concise status reports for management.
• Deliver IAM training and awareness sessions for technical and non-technical staff.
• Track emerging IAM tools and industry developments and raise relevant options with IAM leadership.
• Support identity-related projects end-to-end, working alongside the Director of IAM on strategic delivery.

What You Will Have

Required Experience and Qualifications

• Minimum 6+ years of hands-on experience in Identity and Access Management, with strong, demonstrable Privileged Access Management (PAM) experience at its core.
• Deep, hands-on Privileged Access Management experience is essential — including vault administration, credential rotation, and privileged session management — ideally gained in modern cloud and agentic AI environments.
• Experience implementing or building out a PAM capability (tool selection, deployment, and process design) is highly advantageous, as is practical exposure to Identity Governance and Administration operations such as access certification campaigns.
• Bachelor’s degree in computer science, Information Technology, or a related field.
• Relevant certifications in Windows (Azure, Active Directory) and/or AWS are highly desirable.

Non-Technical Skills

• Strong understanding and ability to articulate the organisation's IAM strategy.
• Knowledge of IAM tools and the ability to recommend suitable operational approaches.
• Strong understanding of security concepts and how they apply to IAM.
• Excellent organisational skills with attention to detail.
• Strong analytical and problem-solving skills.
• Effective communication and project administration abilities.
• Ability to work independently and collaboratively as part of a team.
• Capability to develop and deliver training to diverse audiences.

Technical Skills

• Experience with directory services such as LDAP, Active Directory, and Entra.
• Knowledge of security protocols including SSH and TLS.
• Proficiency in scripting languages such as PowerShell, Python, or Ruby.
• Hands-on experience administering PAM tooling (e.g. CyberArk), including vaulting, credential rotation, and session monitoring; familiarity with secrets management for machine, service, and agentic AI identities is a plus.
• Hands-on experience with IGA tooling (e.g. SailPoint), including access certification campaigns and joiner-mover-leaver workflows.
• Familiarity with other IAM tools (e.g. Secret Server, Okta, Ping Identity).
• Familiarity with database concepts and relational databases such as Microsoft SQL Server.
• Comfortable working across multiple operating systems including Azure, Windows, Unix/Linux.

#LI-PB1

What We Do For You

• Wellbeingfocused–Ourpeopleareourgreatestassets,andensuringeveryonefeelstheirbestself tocometoworkisintegral.
• AnnualLeave–20daysofannualleave,pluspublicholidays
• EmployeeAssistanceProgramme–Freeadvice,support,andconfidentialcounsellingavailable24/7.
• Personal Growth- Regardless of where you are at in your career, we’re committed to enabling your growth personally and professionally
  • Development Programmes– From Future Managers to Leadership Training, our development programmes help you get where you need to go
  • Online Learning Platform: SkillsHub! - Learning at your fingertips, anytime from anywhere. You can access our online library with relevant content for your career growth.
• Life Insurance - 3x annual salary
• Personal Accident Insurance - providing cover in the event of serious injury/illness.
• Performance Bonus– Our Group-wide bonus scheme enables you to reap the rewards of your success

Who We Are

At OneAdvanced, we are at the forefront of delivering sector-focused technology solutions that simplify complexity, drive meaningful progress, and help build a fairer, more inclusive society.

We’re much more than a software company. We deliver SaaS workflow applications and IT services that power organisations across Education, Government, Healthcare, Legal, Manufacturing, Housing, Retail, and more.

OneAdvanced is one of the UK’s largest business software and services companies. Based in Birmingham (The Mailbox), operating across the UK, Ireland, India, and Australia.

Our secure, scalable platform, including OneAdvanced AI, our private AI service for UK organisations, powers connectivity and innovation across critical sectors. Alongside our software are our IT services, including hosting, managed services, and application modernisation.

We strive to create an inclusive workplace that drives innovation and collaboration, championing diverse perspectives and ideas. Our Environmental, Social and Governance (ESG) strategy is embedded in everything we do, guiding us to create meaningful impact for our people, our customers and the planet.

Join us and become part of a team that’s powering the world of work and making a real difference.

Learn more at www.oneadvanced.com