SME – Infrastructure & Security Access Management

Ujjivan Small Finance Bank Ltd.; Bengaluru; Sur place; INR 2 500 000 - 4 500 000; Plein temps

Résumé du poste

Ujjivan Small Finance Bank Ltd. in Bengaluru seeks an experienced SME – Infrastructure & Security Access Management to govern identity, privileged and infrastructure-access controls across the Bank’s IT landscape.

This role drives least privilege, access reviews, and audit evidence within a regulated environment. You will define roadmaps, manage the access lifecycle on AD/Entra ID/Unix/Windows, databases, and cloud platforms, while coordinating with SOC and audit teams to ensure compliant

Qualifications

• 10–15 years of relevant experience in infrastructure security, IAM, PAM, security operations or IT access governance.
• Hands-on experience with AD, Entra ID/Azure AD, LDAP, RBAC, SAML, OAuth, Kerberos and MFA.
• Strong knowledge of PAM tools, identity governance platforms, Windows/Linux administration and cloud IAM.
• Experience governing access to databases, network devices and critical infrastructure.
• Certifications in security/identity domains are a plus.

Responsabilités

• Define and maintain the operational roadmap for infrastructure access controls and privileged access management.
• Translate regulatory and internal policy requirements into procedures, checkpoints and SLAs.
• Administer access across AD, Entra ID, Linux/Unix, Windows servers, databases and cloud/security tools.
• Manage complete access lifecycle for joiners, movers, leavers and temporary/break-glass access.
• Govern privileged IDs, service accounts, admin groups and role mappings.
• Implement least privilege, need-to-know, SoD and time-bound access principles.
• Conduct access reviews, privileged-certifications and dormant ID clean-ups.
• Drive PAM activities: password vaulting, rotation, session monitoring and reports.
• Review privileged logs, coordinate with SOC for investigations.
• Develop SOPs, runbooks, audit templates and evidence packages.
• Support ITGC, PCI DSS, ISO 27001 audits and regulatory reviews.
• Track exceptions and remediation aging; participate in incident response and BCP/DR exercises.
• Drive automation of access workflows, recertification dashboards and SoD monitoring.
• Manage IAM/PAM vendors and implementation partners; prepare management MIS on access metrics.

Connaissances

Identity & access governance

Regulatory/compliance awareness

Analytical thinking

Stakeholder management

Incident response coordination

Formation

BE/BTech / MSc IT or equivalent

Outils

Active Directory

Entra ID/Azure AD

PAM tools

RBAC

SAML/OAuth/Kerberos/MFA

Audit tooling

Description du poste

We are looking for an experienced SME – Infrastructure & Security Access Management to manage the governance, execution and control effectiveness of identity, privileged and infrastructure-access management across the Bank’s IT landscape.

Key Responsibilities

• Define and maintain the operational roadmap for infrastructure access controls, privileged access management and security-access governance.
• Translate regulatory, audit and internal-policy requirements into operating procedures, control checkpoints and measurable SLAs.
• Administer and govern access across Active Directory, Entra ID/Azure AD, Linux/Unix, Windows servers, databases, network devices, cloud platforms and security tools.
• Manage the complete access lifecycle covering joiners, movers, leavers, transfers, temporary access and emergency or break-glass access.
• Govern privileged IDs, shared IDs, service accounts, admin groups, access owners and role mappings.
• Implement least privilege, need-to-know, role-based access control, segregation of duties, maker-checker and time-bound access principles.
• Conduct periodic access reviews, privileged-access certifications and dormant or orphan ID clean-up.
• Manage PAM activities covering password vaulting, credential rotation, session monitoring, reconciliation and exception reporting.
• Review privileged-access logs and coordinate with SOC teams to investigate anomalous or unauthorised activity.
• Develop and maintain SOPs, runbooks, checklists and audit-evidence templates.
• Support ITGC, PCI DSS, ISO 27001, regulatory, statutory and internal audit reviews.
• Track access exceptions, policy deviations and audit observations through closure.
• Participate in incident response, forensic investigations and BCP/DR exercises involving identity or privileged access.
• Drive automation of access workflows, recertification dashboards, SoD monitoring and access analytics.
• Manage IAM/PAM vendors, OEMs, implementation partners and service providers.
• Prepare management MIS on access requests, SLA adherence, access reviews, audit findings and remediation ageing.

Desired Candidate Profile

• BE, B.Tech., B.Sc., BCA, MCA, M.Sc. IT, Computer Science, Cyber Security or an equivalent qualification.
• 10–15 years of relevant experience in infrastructure security, IAM, PAM, security operations or IT access governance.
• Hands-on experience with Active Directory, Entra ID/Azure AD, LDAP, RBAC, SAML, OAuth, Kerberos and MFA.
• Strong working knowledge of PAM tools, Identity Governance and Administration platforms, Windows/Linux administration and cloud IAM.
• Experience governing access to databases, network devices, security tools and critical infrastructure platforms.
• Sound understanding of Zero Trust, segregation of duties, privileged-session monitoring and malware-resistant MFA.
• Strong knowledge of access recertification, audit-evidence management and regulatory controls.
• Excellent analytical, decision-making and problem-solving capabilities.
• Strong stakeholder management, documentation discipline and ownership mindset.
• Preferred certifications include Microsoft SC-300/SC-100, Azure Administrator, CyberArk, ARCON, SailPoint, Saviynt, Oracle IAM, CISSP, CISM, ISO 27001 Lead Auditor/Implementer and ITIL Foundation.