KPMG—Cyber IAM-Associate Director

Job description

Description: -Define and implement the enterprise IGA(SailPoint/Saviynt) and PAM(CyberArk), ensuring alignment with broader security and business objectives. Should be able to lead Pre-Sales, proposals and Client interactions. - Lead the end-to-end design, rollout, and ongoing optimization of identity lifecycle processesprovisioning, de-provisioning, access) and privileged account controls. - Manage, mentor, and build a high-performing team of IAM/PAM engineers and analysts, establishing clear roles, goals, and development plans. -Collaborate closely with IT operations, security architecture, compliance, and business units to translate requirements into scalable governance frameworks, policies, and procedures. - Oversee vendor selection, contract negotiations, solution evaluations, and performance monitoring for IGA and PAM tools. - Ensure continuous compliance with internal policies and regulations (e.g., SOX, GDPR), driving control assessments, audit readiness, and remediation activities. - Champion automation,, and key metrics to measure program maturity, identify risks and deliver continuous improvement in identity and privileged access management. Basic Qualifications - Bachelor's degree in Computer Science, Information Technology or MCA. - 2-5years of experience in Identity and Access Management Requirements: The Role: The primary responsibilities of Identity and Management consultant role is to develop and implement modern Identity and Access Management solutions ranging from ID lifecycle management and governance, authentication, authorization and privileged identity management. The Team / The Business: Candidate will be joining a team of highly motivated and professional individuals. The IAM team is responsible for delivering Identity and Access Management solutions to the multiple organizations across the globe. IAM team has complete purview and control over engineering, architecture, development, deployment and support of Identity and Access Management Systems providing key security services like Identity Governance & Administration, Access Management, Privileged Access Control, SSO, SAML, CASB, Secure DevOps and Modern Directory Services. Team is also responsible for innovation and supporting the integration of IAM services with several hundred applications and working closely with our partners, consultants and alliance partners in implementing security policies that control risk for our clients. The Identity and Access Management team is highly visible due to its place at the heart of security functions , cross-application integration that are distributed across multiple platforms , its enforcement of best practices, and a mandate from KPMG executive management IAM is at the core of firm’s cyber offerings. The right candidate The ideal candidate will be a motivated IAM consultant, who is willing to provide a range of IAM services to our clients across industry verticals. The role requires a combination of the right skills and experience to address the unique needs of businesses in a variety of industries. What’s in it for you We are hiring for experienced IAM consultants for our IAM practice in Bangalore. Candidates with experience in any of one these tool - CyberArk (CP, CCP, ASCP, Conjur, Privileged Cloud) Beyond Trust, and HashiCorp can apply. Having a certification will be an added advantage. Our IAM practice is 100+ people strong if you are looking for a promising career with a people focused, diverse and responsible organization we invite you to join us for a long and healthy mutually successful relationship. Responsibilities • Develop and design reference architectures for both existing and emerging IAM technologies with a focus on CyberArk (CP, CCP, ASCP, Conjur, Privileged Cloud), BeyondTrust, and HashiCorp. • Engineer solutions to resolve complex, global IAM challenges, particularly within the realms of identity governance, user provisioning/deprovisioning, modern access management (including SSO, federated identities, and MFA), and privileged account management. • Engage in enterprise governance processes for Identity and Access Management and drive the adoption of global IAM standards. • Create and maintain effective and scalable IAM architectural solutions that meet diverse project requirements. • Establish and uphold information security policies and standards in line with industry best practices. • Oversee the successful technical delivery of information security projects and services. This involves close collaboration with key business stakeholders, executives, and project teams. • Act as the technical lead on initiatives, providing direction and ensuring alignment with the overall vision of the solution delivery. • Review and manage technical security roadmaps, particularly those related to cloud security and IAM within a cloud context. • Deliver expertise in technical security configuration and architecture aimed at implementing cross-organizational information sharing. • Develop solutions and recommendations to address challenges posed by process inefficiencies, emerging threats, and technology advancements. What We are Looking For - Minimum of 4 years of experience in IAM tools, with a strong emphasis on CyberArk (CP, CCP, ASCP, Conjur, Privileged Cloud). CyberArk CDE certification is mandatory. Experience with BeyondTrust and HashiCorp is also required. - Technical Skills: - Strong Java development experience is essential. - In-depth understanding of identity lifecycle management, governance, provisioning workflows, SOD, and cloud access governance. - Familiarity with authentication and authorization protocols such as SAML, SPML, XACML, SCIM, OpenID, and OAuth. - Knowledge of cloud security governance tools, CASBs, and server virtualization technologies. - Experience with Directories, SSO, Federation, Delegated Administration, and API gateways. - Understanding of cloud computing architecture, including IaaS, PaaS, and SaaS models. - Proficient in scripting languages such as VBScript, PowerShell, Node.js, React, etc. - Knowledge of regulatory and compliance policies is crucial for this role. - Capable of working effectively with both functional business and technical teams in large, complex environments. Must demonstrate the ability to work independently or as part of a team with minimal supervision. - Excellent customer service skills and strong written and verbal communication abilities are essential. Basic Qualifications - Bachelor's degree in Computer Science, Information Technology or MCA. - 2-5years of experience in Identity and Access Management Responsibilities: The Role: The primary responsibilities of Identity and Management consultant role is to develop and implement modern Identity and Access Management solutions ranging from ID lifecycle management and governance, authentication, authorization and privileged identity management. The Team / The Business: Candidate will be joining a team of highly motivated and professional individuals. The IAM team is responsible for delivering Identity and Access Management solutions to the multiple organizations across the globe. IAM team has complete purview and control over engineering, architecture, development, deployment and support of Identity and Access Management Systems providing key security services like Identity Governance & Administration, Access Management, Privileged Access Control, SSO, SAML, CASB, Secure DevOps and Modern Directory Services. Team is also responsible for innovation and supporting the integration of IAM services with several hundred applications and working closely with our partners, consultants and alliance partners in implementing security policies that control risk for our clients. The Identity and Access Management team is highly visible due to its place at the heart of security functions , cross-application integration that are distributed across multiple platforms , its enforcement of best practices, and a mandate from KPMG executive management IAM is at the core of firm’s cyber offerings. The right candidate The ideal candidate will be a motivated IAM consultant, who is willing to provide a range of IAM services to our clients across industry verticals. The role requires a combination of the right skills and experience to address the unique needs of businesses in a variety of industries. What’s in it for you We are hiring for experienced IAM consultants for our IAM practice in Bangalore. Candidates with experience in any of one these tool - CyberArk (CP, CCP, ASCP, Conjur, Privileged Cloud) Beyond Trust, and HashiCorp can apply. Having a certification will be an added advantage. Our IAM practice is 100+ people strong if you are looking for a promising career with a people focused, diverse and responsible organization we invite you to join us for a long and healthy mutually successful relationship. Responsibilities • Develop and design reference architectures for both existing and emerging IAM technologies with a focus on CyberArk (CP, CCP, ASCP, Conjur, Privileged Cloud), BeyondTrust, and HashiCorp. • Engineer solutions to resolve complex, global IAM challenges, particularly within the realms of identity governance, user provisioning/deprovisioning, modern access management (including SSO, federated identities, and MFA), and privileged account management. • Engage in enterprise governance processes for Identity and Access Management and drive the adoption of global IAM standards. • Create and maintain effective and scalable IAM architectural solutions that meet diverse project requirements. • Establish and uphold information security policies and standards in line with industry best practices. • Oversee the successful technical delivery of information security projects and services. This involves close collaboration with key business stakeholders, executives, and project teams. • Act as the technical lead on initiatives, providing direction and ensuring alignment with the overall vision of the solution delivery. • Review and manage technical security roadmaps, particularly those related to cloud security and IAM within a cloud context. • Deliver expertise in technical security configuration and architecture aimed at implementing cross-organizational information sharing. • Develop solutions and recommendations to address challenges posed by process inefficiencies, emerging threats, and technology advancements. What We are Looking For - Minimum of 4 years of experience in IAM tools, with a strong emphasis on CyberArk (CP, CCP, ASCP, Conjur, Privileged Cloud). CyberArk CDE certification is mandatory. Experience with BeyondTrust and HashiCorp is also required. - Technical Skills: - Strong Java development experience is essential. - In-depth understanding of identity lifecycle management, governance, provisioning workflows, SOD, and cloud access governance. - Familiarity with authentication and authorization protocols such as SAML, SPML, XACML, SCIM, OpenID, and OAuth. - Knowledge of cloud security governance tools, CASBs, and server virtualization technologies. - Experience with Directories, SSO, Federation, Delegated Administration, and API gateways. - Understanding of cloud computing architecture, including IaaS, PaaS, and SaaS models. - Proficient in scripting languages such as VBScript, PowerShell, Node.js, React, etc. - Knowledge of regulatory and compliance policies is crucial for this role. - Capable of working effectively with both functional business and technical teams in large, complex environments. Must demonstrate the ability to work independently or as part of a team with minimal supervision. - Excellent customer service skills and strong written and verbal communication abilities are essential. Basic Qualifications - Bachelor's degree in Computer Science, Information Technology or MCA. - 2-5years of experience in Identity and Access Management