Senior Cyber Security IAM Analyst

Role overview

Senior Cyber Security IAM Analyst at OneAdvanced

Responsibilities

• Execute and progressively automate core PAM operations, including credential rotation, privileged session monitoring, and vault hygiene.
• Work with internal customers, business analysts, and application teams to understand and implement access requirements.
• Configure and enforce access policies and procedures.
• Monitor user activity across the IAM system and investigate anomalies.
• Collaborate with internal teams to deliver access control initiatives aligned with corporate security policy and compliance standards.
• Provide expert guidance on IAM tools, technologies, and best practice.
• Support the operational lifecycle of non-human and agentic identities, including authentication, authorisation, monitoring, and de-provisioning.
• Maintain the entitlement catalogue and flag gaps or anomalies to IAM leadership .
• Track emerging IAM tools and industry developments and raise relevant options with IAM leadership.
• Support identity-related projects end-to-end, working alongside the Director of IAM on strategic delivery.

Required qualifications

• Required Experience and Qualifications Minimum 6+ years of hands-on experience in Identity and Access Management, with strong, demonstrable Privileged Access Management (PAM) experience at its core.

Preferred qualifications and skills

• Relevant certifications in Windows (Azure, Active Directory) and/or AWS are highly desirable.

Employment details

• Location: Bengaluru [Karnataka] [India]

Application details

• Strong understanding of security concepts and how they apply to IAM.

About the employer

• At OneAdvanced, we develop and host multiple software products and manage a large technical infrastructure spanning Public Cloud, Private Cloud, and on-premise data centres.

Additional role details

• We are building an AI-first business, and we invest heavily in security and engineering to build, run, and protect our products and customer data with confidence.
• This role sits within our Identity and Access Management (IAM) function and reports to the Director of IAM.
• It is central to a major investment for us: the design, build, and deployment of our next-generation Privileged Access Management (PAM) capability.
• Working closely with technical stakeholders across the CTO organisation, you will help select and implement a new PAM tool and the processes and controls that surround it — including how we secure privileged access for the non-human and agentic AI identities that increasingly run in our environment.
• As the capability matures, you will grow into the subject-matter expert who supports and governs privileged access across the company.
• Privileged Access Management (primary focus) Help design, build out, and deploy our next-generation PAM capability, from tool selection through to production rollout.
• Partner with technical stakeholders across the CTO organisation to implement the new PAM tool and the supporting processes, standards, and controls.
• Extend privileged access controls to non-human and agentic AI identities, securing the credentials, secrets, and just-in-time access these workloads depend on.
• Grow into the subject-matter expert for PAM, helping to govern privileged access policy and standards and advising teams across the business.
• Identity and Access Management Operations Implement and manage identity and access control systems across key strategic platforms, including Active Directory, LDAP, and Entra.
• Manage user accounts, groups, and permissions across the IAM system.
• Grant or deny day-to-day access requests based on user role and privilege, ensuring the right people have access to the right resources.
• Troubleshoot IAM-related issues and design effective solutions.
• Integrate IAM solutions seamlessly into the broader IT infrastructure.
• Support evaluation and adoption of IAM tooling and automation to reduce manual administration.
• Support IAM risk and control activities, including evidence gathering for internal and external audits (e.g. ISO 27001).
• Document IAM processes and procedures.
• Identity Governance and Administration Support Run access certification campaigns, process joiner-mover-leaver requests, and remediate dormant or orphaned accounts.
• Reporting and Continuous Improvement Develop, monitor, and report on IAM, PAM, and IGA metrics and KPIs, and prepare clear, concise status reports for management.
• Deliver IAM training and awareness sessions for technical and non-technical staff.
• Deep, hands-on Privileged Access Management experience is essential — including vault administration, credential rotation, and privileged session management — ideally gained in modern cloud and agentic AI environments.
• Experience implementing or building out a PAM capability (tool selection, deployment, and process design) is highly advantageous, as is practical exposure to Identity Governance and Administration operations such as access certification campaigns .
• Bachelor’s degree in computer science, Information Technology, or a related field.
• Non-Technical Skills Strong understanding and ability to articulate the organisation's IAM strategy.
• Knowledge of IAM tools and the ability to recommend suitable operational approaches.
• Excellent organisational skills with attention to detail.
• Strong analytical and problem-solving skills.
• Effective communication and project administration abilities.
• Ability to work independently and collaboratively as part of a team.
• Capability to develop and deliver training to diverse audiences.
• Technical Skills Experience with directory services such as LDAP, Active Directory, and Entra.
• Knowledge of security protocols including SSH and TLS.
• Proficiency in scripting languages such as PowerShell, Python, or Ruby.
• Hands-on experience administering PAM tooling (e.g. CyberArk), including vaulting, credential rotation, and session monitoring; familiarity with secrets management for machine, service, and agentic AI identities is a plus.
• Hands-on experience with IGA tooling (e.g. SailPoint), including access certification campaigns and joiner-mover-leaver workflows.
• Familiarity with other IAM tools (e.g. Secret Server, Okta, Ping Identity).
• Familiarity with database concepts and relational databases such as Microsoft SQL Server.
• Comfortable working across multiple operating systems including Azure, Windows, Unix/Linux. #LI-PB1