Skip to content

Open nowPosted 27 hours ago

IAM Operations Manager – IGA & PAM

Kidde Global Solutions189 open roles

Where
Hyderabad, Telangana, India
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIAM Operations Manager – IGA & PAMKidde Global Solutions · Hyderabad, Telangana, India
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Kidde Global Solutions's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.9% of postings close within 7 days. Measured by our own scanner across the market. Kidde Global Solutions postings stay open a median of 20 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 13.9%7 days
  4. 22.4%14 days
  5. 38.1%30 days
  6. 59.0%60 days
This job: posted 27 hours ago

Kidde Global Solutions median: 20 days open

The posting

Role Purpose We are looking for an experienced, hands-on IAM manager to lead the team that runs and continuously improves our identity governance and privileged access services, built on Saviynt. Based in India and supporting a global organization, you will lead IAM analysts, engineers, and contract and managed-service resources, while remaining the go-to authority for Saviynt IGA and PAM. You will make sure every identity is provisioned, reviewed, and removed accurately and securely, that our access controls stand up to audit, and that identity issues are traced and fixed from the HR system through Saviynt to Active Directory, Microsoft Entra ID, and downstream applications. This is an end-to-end service ownership and people leadership role, and a minimum of 3 years of hands-on Saviynt experience is required. Key Responsibilities

Lead, coach, and develop the IAM operations team, setting priorities, assigning ownership, and managing delivery across IGA, PAM, SSO, and Joiner-Mover-Leaver workstreams. Own the operation, configuration, and health of the Saviynt identity governance platform, including connectors, reconciliation and provisioning jobs, workflows, rules, and analytics. Run employee and contractor Joiner-Mover-Leaver processes driven from the authoritative HR system, including birthright access, mover reviews, and timely revocation for every leaver. Own Saviynt PAM operations, onboarding servers and privileged, administrative, and service accounts, and operating vaulting, password rotation, and Just-in-Time access. Replace standing privilege with controlled, time-bound access, and govern dormant, orphaned, and unowned privileged accounts. Plan, launch, and close User Access Review and Privileged Access Review campaigns, tracking revocations and remediation to closure. Keep identity data accurate across HR, Saviynt, Active Directory, Microsoft Entra ID, Microsoft 365, and the ITSM platform, resolving duplicate, orphaned, and mismatched identities at the source. Onboard applications into IGA, PAM, and SSO, defining entitlements, roles, workflows, and provisioning interfaces, and build repeatable onboarding frameworks. Govern Microsoft Entra ID SSO integrations using SAML, OpenID Connect, OAuth, and SCIM, together with MFA and Conditional Access. Maintain audit-ready evidence and respond to internal and external audit requests, including SOX in-scope application reviews. Serve as the senior technical escalation point for identity platforms, leading troubleshooting to root cause and managing Saviynt support cases and professional services. Direct contract and managed-service resources against agreed service levels, build cross-skilling and coverage within the team, and maintain runbooks and knowledge articles. Report service performance, metrics, risks, and roadmap priorities to Identity & Cloud Security leadership and the CISO.

Core Competencies

Deep, hands-on mastery of Saviynt identity governance and privileged access, backed by strong analytical troubleshooting across connected systems. Proven people leadership, with the ability to build, coach, and motivate a blended team of employees, contractors, and managed-service partners. Sound, controlled judgment in an environment where an incorrect lifecycle or privileged-access action creates business, audit, or security risk. Strong stakeholder and vendor management, with the ability to secure decisions from HR, application owners, and infrastructure teams and to explain technical issues in business terms.

Qualifications

Minimum 3 years of hands-on Saviynt experience (mandatory), covering connectors, provisioning and reconciliation jobs, workflows, rules, access requests, and certification campaigns. 8+ years of experience in identity and access management or cybersecurity, including substantial hands-on IGA and PAM delivery. Demonstrated experience leading IAM operations or engineering teams, including prioritizing work, coaching staff, and directing contract or managed-service resources. Saviynt PAM (CPAM) experience strongly preferred, or experience with a comparable enterprise PAM platform. Strong practical experience across at least two of IGA, PAM, and SSO, with sufficient knowledge to govern the third. Working knowledge of Microsoft Entra ID and Active Directory, including Conditional Access, MFA, and privileged roles. Experience with SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, REST APIs, and LDAP integrations. Experience with HR-driven identity lifecycle using Dayforce or a comparable HR system, and with Freshservice or a comparable ITSM platform. Experience running access certification campaigns and producing defensible audit evidence, with familiarity with SOX, ISO 27001, or NIST access controls. Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred, or equivalent experience. Saviynt certifications or Microsoft Certified: Identity and Access Administrator Associate are a plus. Excellent written and spoken English, and experience working with teams and stakeholders across AMER, EMEA, and APAC time zones.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Kidde Global Solutions's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on Kidde Global Solutions's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    Kidde Global Solutions's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.