Identity & Access Management (IAM) Engineer

3 - 5 Years

1 Opening

Trivandrum

The IAM Engineer is responsible for implementing and managing identity and access controls across enterprise systems and applications. This role ensures secure user lifecycle management — including provisioning, modification, and de-provisioning of access — in alignment with security, compliance, and audit standards. The IAM Engineer will collaborate closely with Service Desk, Application Owners, and Security teams to ensure operational excellence and effective access governance.

1. User Lifecycle Management

• Execute Joiner–Mover–Leaver (JML) processes across enterprise systems.
• Ensure accurate and timely user provisioning, modification, and deactivation within IAM tools and directories.
• Validate access requests against defined policies and entitlement matrices.
• Coordinate with HR and Service Desk teams to maintain data accuracy and timely updates.

2. Access Provisioning & Governance

• Manage access requests and approvals via ITSM tools (e.g., ManageEngine, ServiceNow).
• Implement and maintain Role-Based Access Control (RBAC) and Segregation of Duties (SoD).
• Maintain access catalogs and entitlement documentation.
• Work with application owners to review and rationalize access roles periodically.

3. Access Reviews & Compliance

• Conduct periodic access reviews and recertifications.
• Identify and remediate inactive or orphaned accounts.
• Support internal/external audits (SOX, GDPR, ISO27001) and maintain compliance evidence.

4. Directory and Platform Administration

• Manage day-to-day operations in Active Directory and Azure AD (user/group management, policies).
• Configure and support MFA, password resets, and conditional access.
• Troubleshoot authentication and access issues across platforms.
• Support integrations between IAM platforms and target applications.

5. Reporting & Continuous Improvement

• Generate reports for provisioning SLAs, exceptions, and compliance metrics.
• Maintain SOPs and Knowledge Base documentation.
• Identify and automate manual IAM processes using scripts or workflows.
• Participate in investigations of unauthorized or failed access attempts.

• 3–7 years of hands-on experience in Identity & Access Management operations.
• Strong knowledge of Active Directory, Azure AD, and access control models.
• Proficiency in user provisioning, access modification, and de-provisioning workflows.
• Familiarity with RBAC, SoD, MFA, and SSO.
• Experience with ITSM tools (e.g., ManageEngine, ServiceNow).
• Understanding of compliance frameworks (SOX, ISO27001, GDPR).
• Strong analytical, troubleshooting, and documentation skills.

• Experience with IAM tools such as SailPoint, CyberArk, Okta, or Saviynt.
• Knowledge of PowerShell scripting or API automation.
• Exposure to cloud IAM (AWS IAM / Azure RBAC).
• Understanding of M365 access controls and email security policies.

User lifecycle management,Access provisioning,Access reviews and governance

UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world's best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients' organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact—touching billions of lives in the process.