Senior IAM Operations Engineer

ThoughtFocus; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

ThoughtFocus is looking for a Senior IAM Operations Engineer to lead the identity lifecycle and oversee IAM operations in Bengaluru, India. This role requires 6+ years of experience in IAM operations, advanced troubleshooting, and strong skills in compliance frameworks. Responsibilities include managing complex access requests, leading governance initiatives, and mentoring junior team members. The ideal candidate is proficient with IAM tools like Saviynt and has strong incident management skills.

Qualifications

• 6+ years of hands-on experience in IAM operations.
• Strong knowledge of identity lifecycle and compliance frameworks.
• Ability to write and understand SQL queries.

Responsibilities

• Lead and oversee user provisioning and access modifications.
• Monitor IAM systems and perform root-cause analysis for failures.
• Lead access review/certification campaigns and manage audits.

Skills

IAM operations

Identity lifecycle

RBAC

SOX controls

Access certifications

Tools

Saviynt

PowerShell

Python

Job description

Job Summary

The Senior IAM Operations Engineer is responsible for leading and overseeing the end-to-end identity lifecycle, ensuring secure, efficient, and compliant access across the enterprise. This role involves advanced troubleshooting, platform optimization, stakeholder coordination, and driving improvements in IAM processes, automation, and governance. The Sr. Engineer will act as a subject matter expert (SME) for operational IAM activities and guide junior team members.

Key Responsibilities

• Identity Lifecycle & Access Operations
  • Lead and oversee user provisioning, deprovisioning, access modifications, and role assignments across all systems.
  • Ensure accurate enforcement of RBAC, birthright access, and defined access policies.
  • Manage complex access requests, approval workflows, and escalations.
  • Ensure JML processes run smoothly and within SLAs.
• Monitoring, Troubleshooting & Platform Stability
  • Own monitoring of IAM systems, connectors, jobs, and workflows—identify failures, bottlenecks, and recurring issues.
  • Perform root‑cause analysis for provisioning failures, job errors, and integration issues.
  • Coordinate with application, infra, and security teams to resolve high‑impact access issues.
• Access Governance & Compliance
  • Lead access review/certification campaigns, including role cleanup, conflict remediation, and attestation follow‑ups.
  • Identify and eliminate orphaned, inactive, and non‑compliant accounts.
  • Prepare audit evidence, manage SOX controls, and support external/internal audits.
  • Ensure alignment with regulatory standards and enterprise security frameworks.
• System Administration & Enhancements
  • Maintain and optimize IAM platform configurations: roles, access profiles, rules, policies, workflows, SOD policies.
  • Drive automation for repeatable tasks using scripts, APIs, or workflow improvements.
  • Support onboarding of new applications, connectors, and integrations.
• Leadership & Stakeholder Management
  • Serve as IAM SME for project teams, audits, escalations, and major incidents.
  • Mentor junior team members—provide guidance on troubleshooting, IAM concepts, and platform usage.
  • Work closely with HR, Security, Application Owners, and Infra teams to streamline IAM processes.
  • Proactively identify gaps in process, security, or tooling and drive improvement initiatives.

Required Skills & Qualifications

• 6+ years of hands‑on experience in IAM operations, preferably with tools like Saviynt
• Strong knowledge of identity lifecycle, RBAC, SOX controls, access certifications, and compliance frameworks.
• Ability to write and understand SQL queries, analyze logs, and identify provisioning patterns.
• Understanding of directory services, SSO, MFA, authentication/authorization protocols (SAML, OAuth, SCIM).
• Strong incident management, documentation, and communication skills.

Preferred Skills

• Experience with workflow optimization, automation (PowerShell, Python, API), and connector management.
• Involvement in IAM transformation projects or large‑scale migrations.
• Certifications such as Security+, CIAM, Azure/AWS Security, or vendor‑specific IAM certifications.