Identity access management

EXP : 8

YRS TO 12

YRS

Access Services – General (1 Offshore)

Purpose

Utilizes technical and operational expertise to support and provide recommendations to deliver effective IT services that will meet the day-to-day needs of the business.

Key skills required are experience with SQL, Powershell, Azure Devops and an understanding of cloud-based identity.

Responsibilities:

- Identity & Access Management:
Support, administer, and enhance IAM solutions, ensuring secure user provisioning, de-provisioning, access reviews, and privilege management in alignment with Zurich’s security standards.
- IAM Tools & Technologies:
Utilize and help optimize IAM platforms (e.g., Active Directory, Azure AD, Okta, SailPoint) for access management, automation, and reporting.
- Break/Fix User Access Support:
Provide timely support for break/fix tickets related to user access, troubleshooting and resolving issues to restore service and ensure appropriate access levels.
- User Lifecycle Management:
Collaborate with HR, IT, and business units to streamline onboarding/offboarding processes and ensure timely access changes.
- Process Improvement:
Identify opportunities to automate IAM processes and improve efficiency using scripting tools (e.g., Power Shell) and workflows (e.g., Azure Dev Ops).
- Role-Based Access Control (RBAC):
Participate in defining and maintaining RBAC models for business applications, ensuring least privilege principles are followed.
- Audit & Compliance:
Support regular audits of access controls, document findings, and work with relevant teams to remediate gaps to ensure compliance with regulatory and internal policies.
- Utilize technology and collaborative skills to provide design expertise for the introduction of new solutions and services in support of the business strategy.
- Collaborate with all peers and partners (internal & external).
- Monitor systems availability/performance and take adequate actions for problem prevention in own area of responsibility.
- Maintain methods, tools, and standards to ensure service availability and performance.
- Provide technological input to implementation and operation.
- Support business projects in planning stages to support consistent design and implementation within existing (planned) infrastructure.
- Contribute to the positive impact of the service improvement programs through effective use of KPIs.
- Business Travel, as required.
- Extended Hours during Peak Periods/Shift Work/Holiday Work, as required.
- Regular Predictable Attendance.
- Visibility in the Office, as required.

Skills

- IAM Principles & Best Practices:
Understanding of core IAM concepts: authentication, authorization, identity lifecycle, privileged access, and access governance.
- IAM Tools

Experience:

Familiarity with one or more IAM platforms (e.g., Active Directory, Azure AD, Okta, SailPoint, Cyber Ark).
- Regulatory & Compliance Awareness:
Knowledge of relevant regulations (e.g., GDPR, SOX) as they pertain to identity and access controls.
- Security Awareness:
Basic knowledge of security frameworks (e.g., NIST, ISO 27001) and their relationship to IAM.
- Process Documentation:
Experience documenting IAM processes, procedures, and standards.
- Technical Scripting and Automation:
Demonstrated hands-on experience leveraging SQL for data management and reporting, utilizing Power Shell for automation and scripting, and employing Azure Dev Ops to support modern development and deployment workflows.
- Cloud Identity Knowledge:
Demonstrated understanding of cloud-based identity and access management concepts (e.g., Azure Active Directory, AWS IAM, Single Sign-On, federation, conditional access).