Sr Associate - Identity & Security Operations Engineer

Oaktree Capital Management; Hyderabad; On-site; INR 1,200,000 - 2,200,000; Full time

Job summary

Oaktree Capital Management is seeking a hands-on Identity & Security Operations Engineer to strengthen enterprise identity, access, and security operations. The role spans identity administration, governance, directory services, authentication, and compliance, with a focus on operational excellence and issue resolution.

The ideal candidate will bring strong Saviynt, AD, and Entra ID experience, plus hands-on troubleshooting, process improvement, and cross-team collaboration across Security,

Qualifications

• 5+ years in Identity and Access Management or related fields.
• 3+ years administering Saviynt in an enterprise environment.
• Strong knowledge of identity governance, access provisioning, and RBAC.

Responsibilities

• Provide day-to-day operational support for the Saviynt IAM platform.
• Troubleshoot Saviynt issues: access, provisioning, certifications, and job failures.
• Onboard and maintain applications, entitlements, roles, and approval workflows.
• Partner with owners to validate entitlement mappings and provisioning behavior.
• Support joiner/mover/leaver processes across Workday, Saviynt, AD, and Entra ID.
• Monitor jobs, connectors, and data-quality for identity data accuracy.

Skills

Identity & Access Management

Saviynt

Active Directory

Entra ID

Access governance

RBAC

Lifecycle management

Job description

Job Summary

We are seeking a hands-on Identity & Security Operations Engineer to support and improve the firm's enterprise identity, access, and security operations capabilities. This role will sit at the intersection of identity administration, identity governance, directory services, access control, authentication, security operations, and compliance.

The ideal candidate has strong operational experience with Saviynt, Microsoft Active Directory, Microsoft Entra ID, privileged access concepts, access governance, and enterprise security controls. This is not a purely governance or policy role. The successful candidate must be comfortable troubleshooting production issues, supporting identity integrations, resolving access and authentication problems, improving operational processes, and partnering with Security, Infrastructure, HRIS, Application, Audit, and Service Desk teams.

This role will be responsible for maintaining reliable identity operations while also helping mature the firm's security posture through stronger access controls, better visibility, automation, lifecycle governance, and secure administration practices.

Key Responsibilities

• Provide day-to-day operational support for the Saviynt Identity Governance and Administration platform.
• Troubleshoot and resolve complex Saviynt issues involving access requests, entitlement visibility, requestability, certifications, provisioning failures, reconciliation errors, job failures, workflow issues, and user lifecycle events.
• Support onboarding and maintenance of applications, entitlements, roles, owners, approval workflows, and access request models within Saviynt.
• Partner with application owners to validate entitlement mappings, access models, role definitions, and provisioning behavior.
• Support joiner, mover, leaver processes across Workday, Saviynt, Active Directory, Entra ID, and downstream applications.
• Monitor scheduled jobs, connectors, feeds, reconciliations, and provisioning tasks to ensure identity data remains accurate and timely.
• Identify recurring operational issues and recommend process, workflow, connector, or data-quality improvements.

Microsoft Identity Administration

• Administer and support Microsoft Active Directory, Microsoft Entra ID, hybrid identity, directory synchronization, groups, service accounts, privileged groups, and access-related directory objects.
• Troubleshoot authentication, authorization, directory replication, group membership, LDAP, Kerberos, DNS-related identity issues, and Entra ID synchronization problems.
• Support identity-related components such as Entra Connect, conditional access dependencies, enterprise applications, SSO integrations, group-based access, and directory-based provisioning.
• Assist with cleanup and rationalization of legacy identity objects, stale accounts, orphaned groups, privileged access paths, service accounts, and over-permissioned access structures.
• Support secure administration practices across Microsoft identity platforms, including administrative role assignments, privileged group management, break-glass account monitoring, and access reviews.

Security Operations and Access Control

• Partner with Security Operations to investigate identity-related alerts, suspicious sign-ins, access anomalies, risky users, privilege misuse, and potential account compromise events.
• Support enforcement and monitoring of access controls across enterprise platforms, including MFA, Conditional Access, privileged access, least privilege, and separation of duties.
• Assist with security incident response activities where identity data, account access, authentication logs, or entitlement history are required.
• Review identity and access logs to support investigations, audit requests, control validation, and root cause analysis.
• Help improve detection, alerting, and reporting around privileged access, stale access, failed provisioning, unauthorized access changes, and identity lifecycle gaps.
• Support operational controls for high-risk accounts, privileged accounts, service accounts, shared accounts, emergency access accounts, and application administrator access.

Access Governance, Audit, and Compliance

• Support access certification campaigns, entitlement reviews, privileged access reviews, and compliance-driven access validation activities.
• Partner with Audit, Compliance, Risk, and application owners to gather evidence, validate access controls, and remediate access findings.
• Help maintain control documentation for identity lifecycle management, access provisioning, deprovisioning, privileged access, role-based access, and access review processes.
• Investigate and remediate access exceptions, orphaned entitlements, inappropriate access, excessive privileges, and failed deprovisioning events.
• Support control testing for SOX, SOC, internal audit, regulatory examinations, and other compliance requirements.
• Ensure identity operations are performed in accordance with firm policies, security standards, and documented procedures.

Identity Integrations and Application Support

• Support identity integrations between Workday, Saviynt, Active Directory, Entra ID, ServiceNow, and enterprise applications.
• Troubleshoot identity data flow issues, attribute mismatches, provisioning failures, connector errors, group assignment problems, and access synchronization issues.
• Work with application teams to define access models, entitlement structures, approval workflows, provisioning requirements, and access review expectations.
• Assist with onboarding new applications into identity governance, SSO, lifecycle management, or access review processes.
• Support SAML, OIDC, LDAP, and directory-based access patterns from an operations and troubleshooting perspective.

Automation, Reporting, and Continuous Improvement

• Develop and maintain scripts, reports, queries, dashboards, and operational checks to improve IAM reliability and visibility.
• Use PowerShell, SQL, Python, Saviynt reporting, Entra admin tools, and ITSM data to identify trends, recurring issues, control gaps, and automation opportunities.
• Create repeatable procedures for common IAM operations, access corrections, incident response support, application onboarding, and audit evidence collection.
• Improve documentation, knowledge base articles, runbooks, troubleshooting guides, and handoff materials for IAM and Service Desk teams.
• Participate in change management, incident management, problem management, and post-incident reviews.

Required Qualifications

• 5+ years of experience in Identity and Access Management, identity operations, security operations, directory services, or access administration.
• 3+ years of hands-on experience administering or supporting Saviynt in an enterprise environment.
• Strong working knowledge of identity governance, access provisioning, access certifications, entitlement management, RBAC, identity lifecycle management, and joiner/mover/leaver processes.
• Strong hands-on experience with Microsoft Active Directory and Microsoft Entra ID.
• Experience troubleshooting authentication, authorization, directory, synchronization, group membership, provisioning, and access-related issues.
• Experience supporting Workday-to-IAM or HR-driven identity lifecycle integrations.
• Understanding of security operations concepts, including account compromise investigation, privileged access monitoring, access anomalies, and identity-related incident response.
• Experience supporting audit, compliance, access reviews, evidence gathering, and control remediation.
• Working knowledge of SSO, SAML, OIDC, LDAP, Kerberos, MFA, Conditional Access, and hybrid identity concepts.
• Strong scripting or reporting experience using PowerShell, SQL, Python, or similar tools.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to work with technical teams, application owners, business stakeholders, auditors, and security teams.

Preferred Qualifications

• Saviynt certification or formal Saviynt training.
• Microsoft identity or security certifications.
• Experience with privileged access management platforms such as CyberArk, Delinea, BeyondTrust, or Microsoft Entra Privileged Identity Management.
• Experience with ServiceNow or another enterprise ITSM platform.
• Experience with Microsoft Defender, Entra ID Protection, Sentinel, Splunk, or other SIEM/security monitoring.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.