IN · Senior Manager · Cyber & Digital Risk · Cybersecurity · Bangalore

Job Profile: At PwC, our people in cybersecurity focus on protecting organisations from cyber threats through advanced technologies and strategies. They work to identify vulnerabilities, develop secure systems, and provide proactive solutions to safeguard sensitive data.

In identity and access management at PwC, you will focus on confirming secure and efficient access to systems and data for employees and/or clients. Your work will involve the design and implementation of strategies to protect sensitive information and manage user identities. Job Description : Senior IAM & PAM SME (Okta, CyberArk & BCP/DR) | 7-10+ Years We are looking for an experienced Identity & Access Management (IAM), Privileged Access Management (PAM) Subject Matter Expert with deep expertise in Okta, hands-on experience in CyberArk and specialized knowledge in BCP/DR execution and advanced identity architecture.

Key Skills & Experience · 7-10+ years of enterprise experience in Identity & Access Management (IAM) and Privileged Access Management (PAM). · Advanced expertise in Okta Engineering, including Identity Proofing, Passwordless & Password-Based flows, Phishing-Resistant Passwordless Authentication, Device-Bound Protection, Emergency Provisioning & Rapid Lifecycle, Custom Login Flows, Custom IdP-to-IdP Integrations, Service Provider (SP) to Multiple IdPs Integration, and Custom OAuth/OIDC/API Access Management. · Deep proficiency in Okta Workflows, Inline Hooks, Regex parsing, Okta Expression Language and custom Okta automation scripts. · Strong hands-on experience with CyberArk PAM (Self-Hosted PAS or Privileged Cloud), including EPV, CPM, PVWA, PSM, AAM and DR Vault replication/failover mechanisms. · Proven capability in writing custom automation and integration scripts using Python or PowerShell for both Okta and CyberArk environments. · Proven experience designing, testing, and executing Business Continuity Planning (BCP) and Disaster Recovery (DR) strategies for IAM/PAM infrastructure. · Strong proficiency in custom Multi-Factor Authentication (MFA) design and custom scripting in PowerShell, Python, or REST APIs. · Solid understanding of core identity protocols: SAML 2.0, OAuth 2.0, OIDC, SCIM, FIDO2/WebAuthn, and LDAP/Active Directory topology. · Excellent analytical, troubleshooting, and architectural problem-solving skills for handling mission-critical authentication failover events. Responsibilities · Architect, implement, and support advanced Okta and CyberArk systems for enterprise BCP/DR initiatives. · Design and execute DR failover, cross-tenant/cross-region replication, and recovery runbooks for Okta and CyberArk systems · Develop custom Okta Advanced Workflows, hooks, and API scripts (utilizing Regex and custom logic) for automated lifecycle and authentication management. · Build custom identity proofing integrations, phishing-resistant passwordless pipelines, device-bound context rules and custom SP-to-multiple-IdP routing configurations. · Manage, configure, and validate CyberArk Vault replication, CPM/PSM nodes, and DR Vault failover/failback operations, developing custom Python or PowerShell scripts for automation and operational efficiency.