Sr. Manager - IAM Specialist

Summary:

Education:

Experience:

Certification:

Responsibilities:

1.    Design, implement, and maintain IAM systems, KMS, SSL certificate and policies.
2.    Integrate LDAP-based identity providers (e.g., Active Directory, OpenLDAP) with cloud platforms and SaaS systems via federation    protocols (SAML, OAuth, OIDC). 3.    Configure and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), and directory services (Active Directory, Azure AD,     LDAP). 4.    Configure and manage federated access control systems to enable seamless user authentication across enterprise services. 5.    Develop and enforce policies for secure file sharing across internal and external users, integrating with encryption and DLP systems. 6.    Ensure IAM, KMS, and federation setups are compliant with security standards such as NIST, ISO 27001, and GDPR. 7.    Manage user identity lifecycle processes (provisioning, de-provisioning, transfers, etc.). 8.    Administer cryptographic key lifecycles, including key generation, distribution, rotation, storage, archival, and destruction. 9.    Support encryption technologies and integrate KMS with enterprise applications, cloud services, and databases. 10.    Perform periodic reviews of key usage and access controls to identify potential risks. 11.    Manage the end-to-end lifecycle of SSL/TLS certificates including issuance, installation, renewal, and revocation. 12.    Monitor certificate expiration dates and automate renewals where possible. 13.    Maintain an inventory of all certificates in use across environments (internal, external, cloud, on-prem). 14.    Troubleshoot LDAP-related issues such as login failures, replication errors, and application integration problems. 15.    Support access control policies and group memberships within the directory. 16.    Manage file sharing permissions and access controls to enforce data confidentiality, integrity, and availability. 17.    Implement security policies for file sharing, including data loss prevention (DLP), encryption, and user access monitoring. 18.    Respond to access-related incidents and service requests. 19.    Integrate IAM systems with various platforms and applications (on-premises and cloud). 20.    Maintain up-to-date documentation of IAM processes, MS SSL certificate inventory and procedures.

Knowledge:

1.    Sound experience in managing IAM, LDAP, SSO,SSL certificate, File sharing , or related IT roles.
2.    Familiarity with some of IAM tools such as Okta, Emudhra, or similar. 3.    Strong understanding of access management, identity governance, and directory services. 4.    Experience with authentication protocols like SAML, OAuth, OpenID Connect, and Kerberos. 5.    Understanding of cryptographic concepts: symmetric/asymmetric encryption, hashing, digital signatures, TLS/SSL, PKI. 6.    Understanding on cloud key management services (KMS, HSM,Key Vault, etc.). 7.    Strong understanding of PKI (Public Key Infrastructure), CAs (Certificate Authorities), and cryptographic principles. 8.    Proficiency in managing directory services such as OpenLDAP, Microsoft Active Directory, or Red Hat Directory Server. 9.    Experience configuring access policies using claims, attributes, and roles. 10.    Experience with both on-premises and cloud-based file sharing solutions. 11.    Familiarity with enterprise authentication systems, MFA and access control models.

Skills:

1. Exceptional analytical, conceptual thinking and problem-solving skills.
2. Excellent communication and interpersonal skills, with the ability to present complex technical information to non-technical stakeholders. 3. Detail-oriented with a focus on quality and accuracy in project/service deliverables 4. Should have strong written, verbal and presentation skills.  5. Ability to perform under pressure, influence stakeholders and work closely with them to determine acceptable solutions.  6. Strong leadership, negotiation, and conflict resolution skills.