About the job:

Job Description:

We are looking for an experienced SME - Infrastructure & Security Access Management to manage the governance, execution and control effectiveness of identity, privileged and infrastructure-access management across the Bank's IT landscape.

Key Responsibilities:

- Define and maintain the operational roadmap for infrastructure access controls, privileged access management and security-access governance.

- Translate regulatory, audit and internal-policy requirements into operating procedures, control checkpoints and measurable SLAs.

- Administer and govern access across Active Directory, Entra ID/Azure AD, Linux/Unix, Windows servers, databases, network devices, cloud platforms and security tools.

- Manage the complete access lifecycle covering joiners, movers, leavers, transfers, temporary access and emergency or break-glass access.

- Govern privileged IDs, shared IDs, service accounts, admin groups, access owners and role mappings.

- Implement least privilege, need-to-know, role-based access control, segregation of duties, maker-checker and time-bound access principles.

- Conduct periodic access reviews, privileged-access certifications and dormant or orphan ID clean-up.

- Manage PAM activities covering password vaulting, credential rotation, session monitoring, reconciliation and exception reporting.

- Review privileged-access logs and coordinate with SOC teams to investigate anomalous or unauthorised activity.

- Develop and maintain SOPs, runbooks, checklists and audit-evidence templates.

- Support ITGC, PCI DSS, ISO 27001, regulatory, statutory and internal audit reviews.

- Track access exceptions, policy deviations and audit observations through closure.

- Participate in incident response, forensic investigations and BCP/DR exercises involving identity or privileged access.

- Drive automation of access workflows, recertification dashboards, SoD monitoring and access analytics.

- Manage IAM/PAM vendors, OEMs, implementation partners and service providers.

- Prepare management MIS on access requests, SLA adherence, access reviews, audit findings and remediation ageing.

Desired Candidate Profile:

- BE, B. Tech, B. Sc, BCA, MCA, M. Sc IT, Computer Science, Cyber Security or an equivalent qualification.

- 10 - 15 years of relevant experience in infrastructure security, IAM, PAM, security operations or IT access governance.

- Hands-on experience with Active Directory, Entra ID/Azure AD, LDAP, RBAC, SAML, OAuth, Kerberos and MFA.

- Strong working knowledge of PAM tools, Identity Governance and Administration platforms, Windows/Linux administration and cloud IAM.

- Experience governing access to databases, network devices, security tools and critical infrastructure platforms.

- Sound understanding of Zero Trust, segregation of duties, privileged-session monitoring and malware-resistant MFA.

- Strong knowledge of access recertification, audit-evidence management and regulatory controls.

- Excellent analytical, decision-making and problem-solving capabilities.

- Strong stakeholder management, documentation discipline and ownership mindset.

- Preferred certifications include Microsoft SC-300/SC-100, Azure Administrator, CyberArk, ARCON, SailPoint, Saviynt, Oracle IAM, CISSP, CISM, ISO 27001 Lead Auditor/Implementer and ITIL Foundation.