Team Lead - Identity and Access Management (IDAM)

Job description

**Qualification:** - B.E. / B.Tech / M.Tech / MCA in Computer Science, Information Technology, Cyber Security, or a related field. - **Industry Certifications (Highly Preferred)** like **CISSP** / **CISM** Enterprises Product-specific certifications if any **Experience:** 10+ Years of Experience in Cybersecurity with 3+ years in IDAM/PAM leadership) **Skills:** - **IAM/IGA Platforms**: Hands-on deployment or administration experience with enterprise suites. - **PAM Technologies**: Advanced engineering knowledge of Enterprises privileged vaulting applications. - **Protocols & Standards**: Deep familiarity with directory services (**Active Directory**, **LDAP**) and federation protocols (**SAML 2.0**, **OIDC**, **OAuth 2.0**). - **Scripting & Databases**: Competency in automation scripting and relational database query languages (**SQL**). **Role & responsibilities:** As the IAM Team Lead, you will spearhead the design, implementation, and maintenance of Identity Governance and Access Management architectures across the banks digital infrastructure. You will manage a team of security engineers ensuring secure user lifecycles, regulatory compliance with RBI guidelines, and robust privilege management for core banking platforms, cloud assets, and third-party systems. **1. Technical Team Leadership & Strategy** - **Lead Operations**: Oversee a dedicated team of IAM analysts handling daily provisioning, de-provisioning, and access modifications. - **Architect IAM Frameworks**: Design and optimize Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) frameworks. - **Drive Automation**: Standardize automated workflows for Joiner, Mover, and Leaver (JML) processes to eliminate manual errors and latency. **2. Privileged Access Management (PAM) & Governance** - **Secure Superuser Accounts**: Direct the deployment and policy enforcement of PAM tools to secure administrative, service, and database accounts. - **Access Certifications**: Orchestrate periodic, mandatory access review and certification campaigns across all banking business lines. - **Enforce Least Privilege**: Eliminate entitlement creep by maintaining a strict "principle of least privilege" posture across legacy and hybrid cloud environments.**Preferred candidate profile** **3. RBI Compliance, Auditing & Risk Management** - **Regulatory Compliance**: Ensure all identity frameworks strictly align with Reserve Bank of India (RBI) cybersecurity guidelines and ISO 27001 standards. - **Segregation of Duties (SoD)**: Implement and continuously audit SoD matrices to prevent internal fraud and cross-functional violations. **Audit Support**: Serve as the primary technical point of contact for internal, external, and regulatory IT audits by producing definitive access logs and reports