Identity Governance Engineer

Job Type: Full-Time

Location: India

Shift: 1 PM IST – 10 PM IST (Minimum 3 hours overlap with US Eastern Time Zone)

Department: Technology Risk Management

Reports To: IGA & PAM Technology Lead (Dotted line to US Head of IDAM and IDAM Operations Lead)

(100% of Role Allocation)

• Maintain, configure, and operate the Identity Governance platform and related integrations with a focus on hands-on implementation and technical engineering.
• Build, code, and customize functionalities such as Access Provisioning, Access Requests, Access Recertification, IT Onboarding and Offboarding, and automated data flows to/from authoritative sources, including the Human Resources Management System (HRMS).
• Monitor and optimize system performance, ensuring maximum uptime, scalability, and security of IDAM services.
• Provide Level 2 (L2) and Level 3 (L3) support for IGA-related issues, troubleshooting complex problems and delivering timely, high-quality user experiences.
• Participate in shift rotations to deliver 16x5 operations for IDAM services and provide off-hours escalation support for high-priority incidents (P1, P2).
• Plan, execute, and supervise installations, maintenance, and changes across in-scope IDAM systems and services, utilizing coding and engineering expertise for efficient implementation.
• Develop, test, and deploy advanced functionalities, including APIs, web services, and custom solutions to extend and enhance IDAM capabilities.
• Identify opportunities to optimize IDAM solutions, introduce new features, and build compelling business cases to support strategic initiatives.
• Act as a hands-on technical subject matter expert, offering detailed coding, configuration, and engineering guidance for relevant IDAM programs and initiatives.
• Ensure compliance with global IDAM policies and processes, as well as relevant regulatory requirements, delivering secure and efficient access to information systems for all users.
• Lead IDAM data hygiene activities, developing tools and scripts to ensure clean, accurate, and well-managed identity data across systems.
• Collaborate closely with HR teams and other stakeholders to maintain data quality and integrity while aligning IDAM services with business objectives.

• Reports directly to IGA & PAM Technology Lead
• Dotted line reporting to US-based Head of IDAM and IDAM Operations Lead
• Member of the global Technology Risk Management organization, reporting to the Chief Information Security Officer (CISO)
• Collaborate with ZTD application, infrastructure, and business partner teams
• Interface with external vendors and integration partners to deploy, maintain, and support IDAM tools and services

Required Education and Qualifications:

• University Degree in Computer Science or Information Systems is required
• Advanced certifications or training preferred, including Certified Information Systems Security Professional (CISSP)

Work Experience:

• Minimum 6+ years of experience in Information Systems
• At least 4+ years of hands-on experience specifically with IGA tools, especially SailPoint IdentityIQ
• 2+ years of experience in a regulated industry, such as pharmaceutical or animal health
• Proven experience managing medium to large-scale global IT projects
• Strong record of collaboration with managed service providers (MSPs) and cross-functional teams across global time zones

Technical Expertise:

• Hands-on expertise with SailPoint IdentityIQ, including configuration, customization, and operational management
• Proficiency with Identity Lifecycle, Access Request, Recertification, and Provisioning/Deprovisioning workflows
• Integration experience with platforms like MS Active Directory, ServiceNow, Workday, SAP
• Proficient in Java, Beanshell, XML, and REST API development
• Advanced SQL skills for reporting and integration
• Familiarity with other IGA platforms such as SailPoint Identity Security Cloud (ISC) or Saviynt is a plus

Additional Technical Requirements:

• Microsoft Active Directory (AD): Deep knowledge of directory structures, user/group management, and replication troubleshooting
• Microsoft Entra ID (formerly Azure AD): Experience with Conditional Access, SSO, B2B trusts
• PowerShell scripting for automation and troubleshooting across identity platforms

Best Practices and Recommendations:

• Skilled in ensuring clean, accurate identity data and collaborating with HR teams for authoritative data flow
• Knowledge of employee offboarding procedures and service account reassignments

Support and Collaboration:

• L2 and L3 support experience, including troubleshooting authentication and identity synchronization issues
• Familiarity with incident response workflows and RCA processes
• Experience working with Service Desk, Site Services, and Security Operations

Desirable Skills:

• Microsoft Power Apps for form building or workflow enhancement
• Automation/data tools such as Alteryx
• Understanding of data warehousing concepts and collaboration with data management teams
• Must be fluent in English, both written and spoken, and capable of engaging technical and non-technical audiences

• Must be available to work between 1 PM IST and 10 PM IST, with at least 3 hours of overlap with US Eastern Time