L3 – IAM & PAM Lead (Entra ID + ARCON)

Hi, We have 4 open positions for the below role in Mumbai, Secondary location is Pune. Interested candidates can email their updated profiles to [HIDDEN TEXT] alongwith the following details: Current CTC, Expected CTC, Notice period, Preferred location: Mumbai / Pune

L3 IAM & PAM Lead (Entra ID + ARCON)

Job Summary:

ITCI Cyber Security team is looking for consolidated role governs the enterprises identity and privileged access lifecycle. The individual is expected to enforce zero trust principles, drive onboarding/offboarding automation, and manage privileged account vaulting and session monitoring. Given its regulatory impact, the role involves proactive audit readiness, ensuring all identity flows and PAM controls align with RBI and SEBI mandates.

Key Responsibilities:

• Lead IAM and PAM operations, covering identity lifecycle, privileged session management, and role-based access control.
• Manage onboarding/offboarding workflows and access provisioning via Entra ID (Azure AD) and ARCON PAM.
• Design and enforce access governance processes with periodic certification reviews and SoD checks.
• Oversee implementation of just-in-time (JIT) access and session recording for all critical privileged accounts.
• Handle integration of IAM and PAM with SIEM, ticketing, and compliance reporting systems.
• Conduct periodic access reviews, privileged entitlement discovery, and cleanup activities.
• Maintain compliance with RBI/SEBI access control policies including MFA, log retention, and zero trust enforcement.
• Guide business units on secure identity practices, policy exceptions, and automation of access approvals.
• Address L2 escalations, audit queries, and continuously improve the maturity of IAM & PAM controls.
• Maintain detailed documentation on user provisioning, change approvals, PAM vaulting, and break-glass procedures.

Key Skills & Certifications:

• 8+ years in IAM/PAM administration
• Strong knowledge of Azure AD, Entra ID, ARCON, and federated identity protocols (SAML, OAuth, OIDC).
• Certified Azure Identity Engineer, ARCON certified specialist, or equivalent.
• Strong grounding in RBI/SEBI audit requirements for access governance and privileged access.