Senior IAM Engineer

Feuji Software Solutions; Hyderabad; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

Zelis is seeking a Senior IAM Engineer to manage PAM and IAM/IGA within the Security team. The role focuses on CyberArk administration, SailPoint governance, and identity management across AD, Azure/Entra, and Duo.

The candidate will implement IAM policies, document configurations, train staff, and drive continuous improvement in security posture.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or related field.
• 7+ years of experience with CyberArk Privilege Cloud, SailPoint, Azure/Entra, AD, or similar IAM/PAM tools.
• CISSP, CISM or other relevant certifications are a plus.

Responsibilities

• Administer CyberArk Privilege Cloud including CPM, Password Vault, and PSM.
• Build and maintain integrations between CyberArk and third-party apps for remote access and credential rotation.
• Administer identities and access in AD, Azure/Entra, and Cisco Duo.
• Assist with SailPoint for mover/joiner/leaver scenarios and governance of Zelis apps.
• Implement and enforce IAM policies and procedures aligned with guidelines and regulations.
• Maintain documentation for IAM configurations and procedures.
• Provide training and support to IT staff on IAM and PAM best practices.
• Identify opportunities for process improvements and implement enhancements.

Skills

CyberArk

Active Directory

Azure Entra

IAM/PAM

SSO

Scripting (PowerShell/Python)

REST APIs

Education

Bachelor's degree

Tools

CyberArk Privilege Cloud

SailPoint

Azure/Entra

Job description

Role & responsibilities

Position: Sr IAM Engineer

Summary

We are seeking a highly skilled and motivated Senior Identity and Access Management (IAM) Engineer to join our Information Security team. The ideal candidate will primarily be responsible for managing and optimizing our Privileged Access Management (PAM) solution to ensure the security and integrity of our organizations privileged accounts. This role will also involve a secondary focus on IAM and Identity Governance and Administration (IGA). Key responsibilities include the daily administration and continuous improvement of Zelis’s PAM environment, as well as collaboration with the IAM team for identity management through the Zelis IGA tool. Additionally, this role requires collaboration with the broader Security Engineering team, which oversees all security platforms across Zelis.

Key Responsibilities

• CyberArk Administration: Manage the deployment, configuration, and maintenance of CyberArk Privilege Cloud, including the Central Policy Manager (CPM), Password Vault, and Privileged Session Manager (PSM).
• CyberArk Engineering: Build and maintain integrations between CyberArk and third-party applications to enable remote access (RDP, SSH, etc.) and credential rotation
• Identity and Access Management: Administer accounts, groups and services related to identity and access in Active Directory, Microsoft Azure/Entra, and Cisco Duo.
• Identity Governance: Assist with configuration and management of SailPoint for mover/joiner/leaver scenarios and governance of all Zelis applications and associates
• Policy Implementation: Implement and enforce policies and procedures for IAM to align with corporate guidelines, industry best practices and regulatory requirements.
• Documentation: Maintain documentation for IAM configurations and procedures.
• Training and Support: Provide training and support to other Zelis IT staff and business units on best practices for IAM and PAM.
• Continuous Improvement: Stay up to date with the latest security trends and product updates. Identify opportunities for process improvements and implement enhancements.

Required Qualifications:

• Education: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• Experience: 7+ years of experience with CyberArk Privilege Cloud, SailPoint, Microsoft Azure/Entra, Active Directory, or similar IAM/PAM tools
• Certifications: CISSP, CISM or other relevant industry certifications are a plus.

Technical Skills:

• In-depth knowledge of CyberArk solutions and components.
• In-depth knowledge of Active Directory
• Experience with privileged access management, identity management, identity governance and security controls.
• Experience with Single Sign On (SSO) and related protocols.
• Familiarity with scripting languages (e.g., PowerShell, Python), REST APIs and API based authentication.