IAM - Cyberark

Location - Gurugram, Mumbai, Pune, Hyderabad, Bengaluru, Chennai First 6 weeks - 6pm to 3 am IST shift - (Training) Post that - 1 pm IST to 10 pm IST

Identity & Access Management (IAM) Administrator Position Summary The Identity & Access Management (IAM) Administrator is responsible for supporting identity governance, access administration, privileged access management, cloud identity management, mobile device management, and IT asset management functions. This role assists in maintaining secure access controls, supporting compliance initiatives, managing user identities and entitlements, administering privileged accounts, and ensuring the integrity of access management processes across enterprise and cloud environments. The position works closely with Information Security, Infrastructure, Application Support, and Business teams to support secure and efficient access to organizational resources.

Essential Job Functions Identity & Access Management (IAM)

• Assist in managing AWS IAM users, groups, roles, and policies.
• Support role-based access control (RBAC) implementation and maintenance for AWS services, including EC2, Lambda, and other cloud resources.
• Provision, modify, and deprovision user access across enterprise applications, cloud platforms, and infrastructure systems.
• Troubleshoot and resolve access-related issues, including permission errors, authentication failures, and role assumption problems.
• Participate in periodic user access reviews, certification campaigns, and entitlement audits.
• Identify, document, and escalate inappropriate access, policy violations, and segregation of duties concerns.
• Maintain accurate identity data, including user attributes, roles, group memberships, and entitlements across supported systems.
• Audit and maintain access controls to ensure compliance with organizational security policies, standards, and regulatory requirements.

Privileged Access Management (CyberArk)

• Assist in the administration and maintenance of CyberArk Privileged Access Management (PAM) solutions.
• Support onboarding and management of privileged accounts, service accounts, and application accounts within CyberArk.
• Assist with account discovery, password vaulting, credential rotation, and privileged session management activities.
• Monitor CyberArk platform health, password management processes, and scheduled jobs to ensure operational effectiveness.
• Troubleshoot and resolve CyberArk-related issues, including account onboarding failures, password reconciliation issues, and access request problems.
• Support privileged access request workflows, approvals, and access certifications in accordance with security policies.
• Assist in implementing and maintaining least-privilege and privileged access security controls.
• Perform periodic reviews of privileged accounts and privileged access assignments to ensure compliance with organizational standards.
• Generate and maintain CyberArk reports related to privileged account activity, password management, and compliance requirements.
• Maintain CyberArk operational documentation, procedures, and onboarding standards.
• Collaborate with infrastructure, cloud, security, and application teams to onboard systems and accounts into CyberArk.

Security & Compliance

• Assist in implementing and maintaining security controls related to identity and access management.
• Support vulnerability remediation efforts by deploying updates, patches, and corrective actions in response to identified security risks.
• Assist with audit requests and provide supporting documentation related to access management, privileged access management, and asset inventories.
• Ensure adherence to established security policies, procedures, standards, and best practices.
• Support compliance initiatives related to access governance, privileged access management, and information security controls.

Service Management & Documentation

• Support ServiceNow workflows related to access requests, incident management, change management, and service fulfillment.
• Create and maintain documentation for IAM and PAM processes, workflows, system configurations, operational procedures, and incident resolutions.
• Maintain accurate records of system changes, troubleshooting activities, and access management actions.
• Develop and update knowledge base articles and standard operating procedures.

Collaboration & Communication

• Collaborate with IT, Security, Infrastructure, Application, and Business teams to implement secure technology solutions.
• Provide technical guidance and support to team members and end users as needed.
• Communicate technical information effectively, both verbally and in writing, to technical and non-technical stakeholders.
• Plan, prioritize, and coordinate assigned tasks to meet operational objectives and project deadlines.
• Participate in special projects and other duties as assigned.

Required Qualifications Education

• Associate's degree or Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Information Systems, or a related field; or an equivalent combination of education and experience.

Experience

• 0–4 years of experience in Identity and Access Management (IAM), Privileged Access Management (PAM), IT Administration, Help Desk, Systems Administration, Cybersecurity, or a related technical role.
• Experience supporting user account administration and access management processes preferred.
• Exposure to cloud environments, particularly Amazon Web Services (AWS), preferred.
• Exposure to CyberArk or other Privileged Access Management solutions is a plus.

Technical Skills

• Basic knowledge of Identity and Access Management (IAM) and Privileged Access Management (PAM) concepts and best practices.
• Familiarity with:
• AWS Identity and Access Management (AWS IAM)
• CyberArk Privileged Access Management (PAM)
• Role-Based Access Control (RBAC)
• Multi-Factor Authentication (MFA)
• Single Sign-On (SSO)
• Microsoft Active Directory
• Microsoft Entra ID (Azure AD)
• Mobile Device Management (MDM) platforms
• ServiceNow or similar IT Service Management (ITSM) tools
• Basic understanding of AWS Management Console and AWS CLI.
• Familiarity with CyberArk components such as:
• Password Vault Web Access (PVWA)
• Central Policy Manager (CPM)
• Privileged Session Manager (PSM)
• Knowledge of Windows operating systems and Microsoft 365 environments.
• Familiarity with IT asset management processes and inventory tracking systems.
• Basic scripting knowledge using PowerShell, Python, or similar technologies is a plus.
• Experience with reporting tools, dashboards, and data analysis is beneficial.

Knowledge, Skills & Abilities

• Understanding of Identity and Access Management (IAM), Identity Governance and Administration (IGA), and Privileged Access Management (PAM) principles and best practices.
• Knowledge of authentication and authorization concepts, including Single Sign-On (SSO), Multi-Factor Authentication (MFA), Role-Based Access Control (RBAC), and least-privilege access models.
• Understanding of user lifecycle management processes, including onboarding, role changes, transfers, and offboarding.
• Knowledge of privileged account management concepts, including credential vaulting, password rotation, session monitoring, and privileged access controls.
• Familiarity with cloud identity and access management concepts, particularly within Amazon Web Services (AWS) environments.
• Understanding of Active Directory, Microsoft Entra ID (Azure AD), group management, and directory services administration.
• Understanding of IT asset management lifecycle processes, including procurement, deployment, inventory tracking, maintenance, and retirement.
• Familiarity with IT Service Management (ITSM) processes, including Incident Management, Change Management, Problem Management, and Request Fulfillment.
• Ability to analyze and troubleshoot access-related issues across enterprise applications, cloud platforms, and infrastructure systems.
• Ability to investigate security incidents, identify root causes, and recommend corrective actions.
• Ability to identify access risks, segregation of duties conflicts, and compliance concerns.
• Strong attention to detail with the ability to maintain accurate records, documentation, and audit evidence.
• Ability to manage multiple tasks, priorities, and deadlines in a fast-paced operational environment.
• Ability to follow established policies, procedures, and security standards while maintaining a high level of accuracy.
• Ability to work independently with minimal supervision while also contributing effectively as part of a team.
• Strong customer service orientation with the ability to support users professionally and efficiently.
• Effective verbal and written communication skills with the ability to explain technical concepts to both technical and non-technical audiences.
• Ability to create and maintain technical documentation, standard operating procedures (SOPs), process flows, and knowledge base articles.
• Experience using Microsoft Office applications, including Excel, Word, PowerPoint, and Outlook.
• Ability to generate reports, dashboards, and metrics to support operational and compliance objectives.
• Basic knowledge of scripting and automation tools such as PowerShell, Python, or similar technologies is preferred.
• Commitment to maintaining confidentiality and safeguarding sensitive information, privileged credentials, and organizational data.
• Demonstrated willingness to learn emerging technologies, security practices, and identity management solutions.
• Ability to adapt to changing business requirements, technologies, and security priorities.