Lead - Infrastructure Security (IAM)

Job Title

Lead - Cyber Security –Infrastructure Security - IAM

Reporting Structure

Reports to Manager/Sr Manager

Education

BE/BCA/B-TEC/Bsc.IT or any Graduate from authorised university

Experience/ Qualifications

• Excellent written and verbal communication skills in English, high integrity, strong work ethic and ability to empathize with the customer.

• At least 5 years of L2/L3 Cyber Security experience with large organization, Bank, or global IT or consulting firm.

• At least 3-4 years hands-on experience of IAM solution like IBM Verify, Cyber ARK, Sailpoint, OKTA, Azure AD, WSO2.

• Good understanding of AD, MS Entra ID services.

• Exposure of Privileged Access Management tools and processes.

• IAM Architecture exposure for on-prem and cloud setup.

• Exposure of development of IAM policies, procedures, and documentation to ensure compliance with industry regulations and best practices.

• Good Understanding of MFA, Single sign on, Access Management and Authentication protocols like SAML, Kerberos and OIDC used for integration purpose.

• Exposure of API Security and authentication mechanisms.

• Good understanding of IAM services in public cloud.

• Exposure of secrets management.

• Good understanding of authentication, authorization and user life cycle concepts

• Candidate should be able to understand the application integration process onto IAM platform.

• Collaborate with other IT teams and stakeholders to integrate IAM solutions with existing systems and applications.

• Knowledge of BCP (Business Continuity Planning) document for the process

• Monitor and analyze access logs, user activity, and security events to identify potential security threats and vulnerabilities.

• Should be able to document SOPs, SOW and other process related documents for IAM

• Conduct regular security assessments and reviews to identify areas for improvement and implement corrective actions to strengthen IAM security controls.

• Should be able to track all the incidents related to the IAM operations and work to close the incidents within time.

• Troubleshooting skills are mandatory for resolving issues related to the application integration, user issues and other operational issues.

• Security incident response and investigation.

Responsibilities

• Oversee identity governance, access control, and user lifecycle management to ensure secure and seamless access to critical systems.

• Provide tier 2/3 support for data centre and handle infrastructure security incidents.

• Support IAM technology stack including monitoring, hygiene, enhancements development and other activities to ensure that the security systems are operational and effective.

• Proactively identify gaps and develop solutions to routine problems.

• Lead implementation of IAM strategies and framework. Plan, implement, maintain, monitor, and support enterprise IAM solutions.

• Conduct IAM Architecture review. Evaluate and recommend new IAM and related technologies to enhance security and efficiency.

• In-depth understanding of IAM enterprise technologies, as well as key business and security drivers as they relate to the projects

• Communicate with customers to clarify requests, to report status, or to provide information as needed

• Work closely with key stakeholders to understand requirements and drive the design, development, and implementation of improvements to our IAM systems

• Collect and qualify required artifacts, develop test plans, and lead application implementation efforts to guarantee success

• Participate in security assessments and audits. Build-up and transfer interdisciplinary knowledge.

• Collaborate with the Operations Manager to ensure that documented plans are in place for the following items (operational support, updates for control tools, weekly report for stakeholders on operational and control health metrics)

• Provide SME advice on IAM tool capabilities and configuration adjustments when needed to contain security incidents or block future security attacks.

• SME to continually evaluate security control performance and effectiveness to facilitate maximum uptime and minimize malfunctions.

• Troubleshooting experience with Data security and application troubleshooting.

• Coordinating with business and understanding their requirements regarding enhancements.

• Review of effectiveness of controls and preparing Risk dashboards.

• Participate in continual improvement and benchmarking activities.

• Collaborate with internal and external stakeholders for timely delivery of the assigned engagements/projects.

• Reviewing the status of the projects and taking corrective/preventive measures as approved.

Certifications

ISO 27001, CIAM, CAMS, CISSP, CIP, CCSP, MS IAM Associate, IBM Security Verify

Location

Navi Mumbai

Employment Type

All positions are on fixed term contract on a full-time basis exclusively for ReBIT, initially for a period of five years, extendable by mutual consent