The posting
Role Purpose We are looking for an experienced, hands-on IAM manager to lead the team that runs and continuously improves our identity governance and privileged access services, built on Saviynt. Based in India and supporting a global organization, you will lead IAM analysts, engineers, and contract and managed-service resources, while remaining the go-to authority for Saviynt IGA and PAM. You will make sure every identity is provisioned, reviewed, and removed accurately and securely, that our access controls stand up to audit, and that identity issues are traced and fixed from the HR system through Saviynt to Active Directory, Microsoft Entra ID, and downstream applications. This is an end-to-end service ownership and people leadership role, and a minimum of 3 years of hands-on Saviynt experience is required. Key Responsibilities
Lead, coach, and develop the IAM operations team, setting priorities, assigning ownership, and managing delivery across IGA, PAM, SSO, and Joiner-Mover-Leaver workstreams. Own the operation, configuration, and health of the Saviynt identity governance platform, including connectors, reconciliation and provisioning jobs, workflows, rules, and analytics. Run employee and contractor Joiner-Mover-Leaver processes driven from the authoritative HR system, including birthright access, mover reviews, and timely revocation for every leaver. Own Saviynt PAM operations, onboarding servers and privileged, administrative, and service accounts, and operating vaulting, password rotation, and Just-in-Time access. Replace standing privilege with controlled, time-bound access, and govern dormant, orphaned, and unowned privileged accounts. Plan, launch, and close User Access Review and Privileged Access Review campaigns, tracking revocations and remediation to closure. Keep identity data accurate across HR, Saviynt, Active Directory, Microsoft Entra ID, Microsoft 365, and the ITSM platform, resolving duplicate, orphaned, and mismatched identities at the source. Onboard applications into IGA, PAM, and SSO, defining entitlements, roles, workflows, and provisioning interfaces, and build repeatable onboarding frameworks. Govern Microsoft Entra ID SSO integrations using SAML, OpenID Connect, OAuth, and SCIM, together with MFA and Conditional Access. Maintain audit-ready evidence and respond to internal and external audit requests, including SOX in-scope application reviews. Serve as the senior technical escalation point for identity platforms, leading troubleshooting to root cause and managing Saviynt support cases and professional services. Direct contract and managed-service resources against agreed service levels, build cross-skilling and coverage within the team, and maintain runbooks and knowledge articles. Report service performance, metrics, risks, and roadmap priorities to Identity & Cloud Security leadership and the CISO.
Core Competencies
Deep, hands-on mastery of Saviynt identity governance and privileged access, backed by strong analytical troubleshooting across connected systems. Proven people leadership, with the ability to build, coach, and motivate a blended team of employees, contractors, and managed-service partners. Sound, controlled judgment in an environment where an incorrect lifecycle or privileged-access action creates business, audit, or security risk. Strong stakeholder and vendor management, with the ability to secure decisions from HR, application owners, and infrastructure teams and to explain technical issues in business terms.
Qualifications
Minimum 3 years of hands-on Saviynt experience (mandatory), covering connectors, provisioning and reconciliation jobs, workflows, rules, access requests, and certification campaigns. 8+ years of experience in identity and access management or cybersecurity, including substantial hands-on IGA and PAM delivery. Demonstrated experience leading IAM operations or engineering teams, including prioritizing work, coaching staff, and directing contract or managed-service resources. Saviynt PAM (CPAM) experience strongly preferred, or experience with a comparable enterprise PAM platform. Strong practical experience across at least two of IGA, PAM, and SSO, with sufficient knowledge to govern the third. Working knowledge of Microsoft Entra ID and Active Directory, including Conditional Access, MFA, and privileged roles. Experience with SAML 2.0, OpenID Connect, OAuth 2.0, SCIM, REST APIs, and LDAP integrations. Experience with HR-driven identity lifecycle using Dayforce or a comparable HR system, and with Freshservice or a comparable ITSM platform. Experience running access certification campaigns and producing defensible audit evidence, with familiarity with SOX, ISO 27001, or NIST access controls. Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field preferred, or equivalent experience. Saviynt certifications or Microsoft Certified: Identity and Access Administrator Associate are a plus. Excellent written and spoken English, and experience working with teams and stakeholders across AMER, EMEA, and APAC time zones.



