Senior IAM Operations Engineer

ESP Engineered; Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

ESP Engineered is seeking a Senior IAM Operations Engineer in Hyderabad, India. The successful candidate will oversee the identity lifecycle and ensure secure access. Responsibilities include managing user provisioning, conducting access reviews, and leading troubleshooting efforts. Candidates should have 6+ years of IAM operations experience, strong incident management skills, and be knowledgeable in tools like Saviynt. This role involves collaboration with teams to drive improvements in IAM processes and mentor junior members.

Qualifications

• 6+ years of hands-on experience in IAM operations, preferably with tools like Saviynt.
• Strong knowledge of identity lifecycle, RBAC, SOX controls, access certifications, and compliance frameworks.
• Ability to write and understand SQL queries, analyze logs, and identify provisioning patterns.
• Understanding of directory services, SSO, MFA, authentication/authorization protocols (SAML, OAuth, SCIM).
• Strong incident management, documentation, and communication skills.

Responsibilities

• Lead and oversee user provisioning, deprovisioning, access modifications, and role assignments.
• Ensure accurate enforcement of RBAC, birthright access, and defined access policies.
• Own monitoring of IAM systems, identify failures, bottlenecks, and recurring issues.
• Lead access review/certification campaigns and prepare audit evidence.
• Serve as IAM SME for project teams, audits, escalations, and major incidents.

Skills

IAM operations

Saviynt

incident management

SQL queries

directory services

SSO

MFA

automation

Job description

The Senior IAM Operations Engineer is responsible for leading and overseeing the end-to-end identity lifecycle, ensuring secure, efficient, and compliant access across the enterprise. This role involves advanced troubleshooting, platform optimization, stakeholder coordination, and driving improvements in IAM processes, automation, and governance. The Sr. Engineer will act as a subject matter expert (SME) for operational IAM activities and guide junior team members.

Key Responsibilities

1. Identity Lifecycle & Access Operations

• Lead and oversee user provisioning, deprovisioning, access modifications, and role assignments across all systems.
• Ensure accurate enforcement of RBAC, birthright access, and defined access policies.
• Manage complex access requests, approval workflows, and escalations.
• Ensure JML processes run smoothly and within SLAs.

2. Monitoring, Troubleshooting & Platform Stability

• Own monitoring of IAM systems, connectors, jobs, and workflows—identify failures, bottlenecks, and recurring issues.
• Perform root-cause analysis for provisioning failures, job errors, and integration issues.
• Coordinate with application, infra, and security teams to resolve high-impact access issues.

3. Access Governance & Compliance

• Lead access review/certification campaigns, including role cleanup, conflict remediation, and attestation follow-ups.
• Identify and eliminate orphaned, inactive, and non-compliant accounts.
• Prepare audit evidence, manage SOX controls, and support external/internal audits.
• Ensure alignment with regulatory standards and enterprise security frameworks.
• Maintain and optimize IAM platform configurations: roles, access profiles, rules, policies, workflows, SOD policies.
• Drive automation for repeatable tasks using scripts, APIs, or workflow improvements.
• Support onboarding of new applications, connectors, and integrations.

5. Leadership & Stakeholder Management

• Serve as IAM SME for project teams, audits, escalations, and major incidents.
• Mentor junior team members—provide guidance on troubleshooting, IAM concepts, and platform usage.
• Work closely with HR, Security, Application Owners, and Infra teams to streamline IAM processes.
• Proactively identify gaps in process, security, or tooling and drive improvement initiatives.

Required Skills & Qualifications

• 6+ years of hands-on experience in IAM operations, preferably with tools like Saviynt
• Strong knowledge of identity lifecycle, RBAC, SOX controls, access certifications, and compliance frameworks.
• Ability to write and understand SQL queries, analyze logs, and identify provisioning patterns.
• Understanding of directory services, SSO, MFA, authentication/authorization protocols (SAML, OAuth, SCIM).
• Strong incident management, documentation, and communication skills.

Preferred Skills

• Experience with workflow optimization, automation (PowerShell, Python, API), and connector management.
• Involvement in IAM transformation projects or large-scale migrations.
• Certifications such as Security+, CIAM, Azure/AWS Security, or vendor-specific IAM certifications.

Required Skills

Powershell Identity and Access Management (IAM) professional