IAM Support Specialist – Identity & Access Management

2 - 3 Years
2 Openings
Chennai

The IAM Support Specialist is responsible for administering and maintaining user identity and access management systems to ensure secure and compliant access across Client’s IT landscape. The role involves managing access requests, user provisioning and deprovisioning, RBAC enforcement, compliance reviews, and resolving IAM-related incidents. The specialist collaborates with Service Desk, Security Operations, and Application teams to ensure adherence to least-privilege and Segregation of Duties (SoD) principles.

2. Key Responsibilities

Identity Lifecycle Management

• Administer user identities across Active Directory, Azure AD, and enterprise applications.

• Perform user provisioning, deprovisioning, and role modifications according to JML (Joiner–Mover–Leaver) processes and HR feeds.

• Ensure account and group memberships align with business roles and entitlements.

• Manage service accounts, distribution lists, and shared mailbox access.

Access Management

• Process and fulfil user access requests for applications, network, and data systems.

• Apply access assignments following RBAC and SoD policies.

• Handle account unlocks, password resets, and MFA registration issues.

• Ensure timely access revocation for leavers and contract expirations.

Privileged Access Management (PAM)

• Support privileged account provisioning and password vaulting processes.

• Manage access to elevated and administrative accounts under an approval workflow.

• Collaborate with Security Operations to monitor privileged session activities.

Compliance & Audit Support

• Conduct periodic User Access Reviews (UARs) for critical applications and systems.

• Generate audit reports for SOX, ISO 27001, and other compliance needs.

• Maintain documentation and access records for audit readiness.

• Participate in remediation of audit findings and policy violations.

Incident & Request Support

• Respond to IAM-related incidents and service requests via ITSM tools (ManageEngine).

• Investigate issues related to authentication, login failures, or SSO.

• Work with Application, Network, and AD teams for root cause analysis and resolution.

• Ensure SLAs for incident response and closure are met.

Process Documentation & Improvement

• Maintain updated SOPs, workflow diagrams, and work instructions for IAM processes.

• Contribute to the development of access management standards and policies.

• Identify recurring issues and recommend automation or workflow enhancements.

3. Required Skills & Experience

Technical Skills

• Strong understanding of IAM concepts (JML, RBAC, SoD).

• Hands-on experience with Active Directory, Azure AD, and Microsoft Entra ID.

• Familiarity with MFA, SSO, and federation protocols (SAML, OAuth, OpenID Connect).

• Experience with PAM tools such as CyberArk or BeyondTrust.

• Exposure to identity governance platforms like SailPoint, Saviynt, or Okta (desirable).

• Experience with ITSM tools (ManageEngine, ServiceNow).

• Awareness of compliance standards such as SOX, GDPR, and ISO 27001.

Soft Skills

• Strong analytical and troubleshooting abilities.

• Detail-oriented with a compliance-driven approach.

• Effective communication and stakeholder coordination skills.

• Ability to work both independently and collaboratively.

4. Qualifications

• Bachelor’s degree in IT, Computer Science, or a related field.

• 3–7 years of experience in IAM operations or related security support roles.

• ITIL Foundation certification preferred.

• Security certifications such as Microsoft Identity & Access Administrator, CompTIA Security+, or CIMP are desirable.

5. Tools & Platforms

• Directory Services: Active Directory, Azure AD, Microsoft Entra ID

• PAM Tools: CyberArk, BeyondTrust (or equivalent)

• IGI Tools: SailPoint, Saviynt, Okta (advantageous)

• ITSM: ManageEngine, ServiceNow

• Security & Compliance: Microsoft Defender, CrowdStrike, Zscaler

• Automation: PowerShell scripting

Azure Ad,Active Directory,cyberark,Iam