Technical Lead - iAM

Tech Lead - IAM

Key Responsibilities :

- Own the technical design of identity discovery and access intelligence solutions, establishing how identity data is collected, correlated, and analyzed across Active Directory, Microsoft Entra ID, AWS, GCP, and OCI.

- Develop advanced Python and PowerShell solutions to correlate identities across platforms, resolve duplicate or inconsistent records, map identity relationships, and establish a consolidated identity inventory.

- Design automated entitlement analysis mechanisms to evaluate effective permissions, nested group memberships, inherited access, cross-account roles, service identities, and privileged access paths.

- Build logic to identify toxic access combinations, excessive privileges, inactive entitlements, orphaned identities, unmanaged service accounts, and deviations from least-privilege principles.

- Develop connectors and integration components using Microsoft Graph API, AWS SDK/boto3, Google Cloud APIs and CLI, and OCI APIs and CLI, handling pagination, rate limits, failures, authentication, and data consistency.

- Engineer data pipelines that transform raw identity and permission data into normalized entitlement models suitable for access analytics, PAM onboarding, and governance assessments.

- Define technical approaches for privileged identity classification, account criticality assessment, access tiering, and prioritization of accounts for PAM onboarding.

- Convert identity analysis findings into technical specifications for privileged access controls, role redesign, access profiles, service account governance, and remediation workflows.

- Design automated validation mechanisms to assess whether proposed access changes align with role definitions, security policies, and least-privilege requirements.

- Optimize identity processing for large datasets through efficient querying, incremental data collection, parallel processing, and performance tuning.

- Establish automated testing and data quality controls to validate connector accuracy, entitlement mappings, identity correlation, and risk detection results.

- Lead technical investigations into complex identity and authorization issues, including permission inheritance, cross-cloud trust relationships, inconsistent access records, and unexpected privilege exposure.

- Work with security architects, PAM specialists, cloud engineering teams, and governance stakeholders to validate technical findings and convert them into implementable security requirements.

- Define reusable engineering patterns, technical documentation, and code quality standards while reviewing complex implementations and mentoring engineers.

Required Technical Skills :

- 10 - 13 years of experience in software development, IAM engineering, identity automation, or security engineering, with strong hands-on development expertise.

- Advanced Python and PowerShell skills, including API integrations, data processing, automation frameworks, and production-grade scripting.

- Strong understanding of Active Directory and Microsoft Entra ID, including directory objects, group nesting, service principals, application identities, and authorization models.

- Practical understanding of AWS IAM, GCP IAM, and OCI IAM, including effective permissions, role assumption, policy evaluation, service accounts, and resource hierarchies.

- Experience with Microsoft Graph API, boto3, cloud APIs and CLIs, authentication mechanisms, pagination, and resilient integration design.

- Strong SQL and data analysis skills for processing large datasets, reconciling identities, mapping entitlements, and identifying access anomalies.

- Solid understanding of RBAC, least privilege, privileged access, entitlement management, identity lifecycle, and access governance.

- Experience with Git, automated testing, CI/CD, secure coding, logging, and troubleshooting production integrations.