PKI Operations-Senior Associate-Cyber Managed services - Consult

Overview

Senior Associate in PwC Cyber Data & Tech Risk Managed Services, delivering end-to-end operational support and engineering for Identity and Access Management (IAM) capabilities across client environments, covering Identity Governance & Administration (IGA), Privileged Access Management (PAM) and Access Management (AM).

What you'll do

• Provide operational support for IGA, PAM and AM platforms, including monitoring, troubleshooting and break/fix.
• Execute standard changes (new app onboarding, connector configuration, policy updates) and support platform upgrades and patching under change control.
• Participate in on-call rotations and major incident responses for IAM services, coordinating with stakeholders until resolution.
• Maintain accurate ticket updates, communication and documentation to ensure timely resolution and customer satisfaction.
• Handle L3 escalations for IAM incidents and complex service requests, driving technical triage and resolution.
• Lead complex application onboarding, including requirements gathering, integration design, connector configuration and end-to-end validation.
• Design and implement repeatable automation for joiner/mover/leaver processes, privileged access onboarding and access review remediation using scripts and APIs.
• Create dashboards and metrics to track operational performance and identify improvement opportunities.
• Contribute to platform hardening, configuration standards and secure-by-default patterns for IAM services.
• Provide architecture guidance and solution design for IAM capabilities and integrations.
• Deliver strategic recommendations and roadmaps for IAM tooling, automation and process improvements.
• Plan and execute IAM tool migrations and platform transitions, including upgrades and consolidations, with controlled cutover.
• Ensure IAM activities comply with PwC policies, client governance frameworks and applicable regulatory requirements.
• Support audits by producing evidence of IAM controls, process adherence and remediation actions.
• Assist in preparing periodic status reports and operational summaries for client and internal stakeholders.

What you'll need

• Bachelor's or master's degree.
• Over 5 to 8 years of hands-on IAM implementation and operations support.
• Relevant experience in end-to-end support of IAM services.
• Demonstrated knowledge or proven success in configuring, administering and supporting IGA tools such as SailPoint ISC/IIQ, Saviynt or equivalent platforms.
• Experience implementing and optimising access request management, approval workflows and automated provisioning/de-provisioning.
• Application of user lifecycle management best practices including RBAC, segregation of duties (SoD) and least privilege.
• Performing periodic access reviews/certifications, supporting remediation and maintaining audit-ready evidence.
• Experience integrating applications with IGA solutions.
• Administering PAM solutions such as CyberArk and Delinea, including secure privileged account onboarding, credential rotation, session management and policy enforcement.
• Strong knowledge of CyberArk solutions, including PAM, PAS, Cloud and related modules (PTA, EPM, Alero, etc.).
• Experience in Secrets Server administration and policy management.
• Experience in upgrading CyberArk or Delinea PAM components.
• Coordination with infrastructure, security and application teams for privileged access controls.
• Well versed in automation scripts using REST APIs.
• Knowledge of customising CyberArk platforms and connectors/plugins (AutoIT/shell scripting) and of auto-detection configuration and discovery scanning tools.
• Supporting Access Management capabilities including SSO, MFA and federation protocols (SAML, OAuth, OpenID Connect) using platforms such as PingID, Okta, Microsoft Entra ID or equivalent.
• Advanced knowledge of identity federation, SSO and MFA solutions.
• Strong understanding of IAM concepts and protocols (SAML, OAuth, OpenID Connect).
• Experience with enterprise provisioning, role-based access controls, SSO, external and internal federation and systems integration.
• Knowledge of regulatory compliance requirements related to identity management (e.g., GDPR, HIPAA).
• Proficiency in integrating IAM solutions with a wide range of applications and platforms.
• Experience with APIs, SDKs and automation scripting (e.g., Python, PowerShell) for complex IAM workflows.
• Owning incident, problem and change management for IAM/PAM services following ITIL practices using ServiceNow and Jira.
• Developing and maintaining runbooks, knowledge articles and SOPs.
• Driving automation and integration using PowerShell, Python, Ruby, REST APIs and tooling such as Postman.
• Collaborating cross-functionally with IT security, risk, compliance and application owners.
• Monitoring service health, supporting SLA adherence, performing root cause analysis and recommending improvements.

Nice to have

• Relevant experience in end-to-end support of IAM services and certifications such as CISSP, CISM, CISA, GIAC (GCIH, GSEC, GCIA), CCSP or equivalent is desirable.
• Certifications specific to IAM are an advantage, including SailPoint Certified IdentityIQ Engineer, SailPoint Certified Identity Security Engineer (Cloud), Saviynt Certified IGA Professional (SCIP), CyberArk CDE, Delinea Secret Server, Okta Certified Professional, and Ping Federate, Ping Directory or Ping Identity Professional.

Details

• Location: Bangalore (SDC) - Bagmane Tech Park.
• Travel requirements: not specified.