Principal Identity Access Management Engineer

The Principal IAM Engineer will provide technical assistance and expertise in architecting, developing, and delivering IAM tools and process as prescribed by the internal IT frameworks and standards to deliver innovative, value-added technology and optimization of internal processes across Orbia’s environment globally.

This role will work closely with Orbia’s Infrastructure Teams, Application Teams to develop, design of the IAM environment, planning, implementing, managing, monitoring, and upgrading it for the protection of the organization’s data, systems, and networks. This role plays a pivotal role in performing gap analysis of the current IAM environment security postures against relevant industry benchmark’s and enabling the execution of a roadmap for strengthening controls in line with the organization risk appetite.

This role will work side by side with infrastructure, application, cybersecurity teams and other stake holders to handle complex design and development activities and escalations working with external vendor, as deemed necessary.

This role will work with Managed Service Providers to improve and develop new features or integration with the IAM environment and also to bring operational improvements for the tool.

This role has deep hands-on expertise with two or more Identity Access Management solutions like Sailpoint, AD / LDAP, EntraID, CyberArk and demonstrable knowledge of current technologies in authentication, federation, and identity management space, such as JML process, certification process, authentication and authorization concepts, OAuth 2.0, OpenID Connect, SAML, SCIM etc..

KEY RESPONSIBILITIES :

• Design, implement, and maintain the organization's Identity and Access Management systems, including EntraID, SailPoint, Auth0, and Okta.
• Development & execution of the IAM strategy across the infrastructure and Business applications
• Implement IGA projects using SailPoint, including Application Onboarding, Access Certification, Identity and Account lifecycle events (Joiner / Mover / Leaver), as well as role and entitlement analysis
• Develop and implement the CIAM (Customer Identity) strategy for the organization to ensure secure, seamless, and personalized digital experiences for customers, dealers, and service partners.
• Define and execute a comprehensive IAM strategy for our IoT and digital products, aligning it with business objectives.
• Identify and evaluate risks associated with IoT and digital product access management and design appropriate controls.
• Evaluate and recommend security policies, procedures, and technical controls for identity and access management.
• Ensure compliance with regulatory requirements and security best practices.
• Collaborate with cross-functional teams to develop and maintain access control policies and procedures.
• Develop and maintain documentation related to identity and access management systems.
• Involved in conducting periodic access reviews and ensuring appropriate access is granted based on job responsibilities.

EDUCATION & EXPERIENCE :