Identity And Access Manager

Role & responsibilities

People and Service Leadership

• Lead a global IAM team of five employees located in India and Israel, including work planning, prioritization, professional development, performance management, and workload balancing.
• Own the IAM service roadmap, operating model, standards, procedures, documentation, and continuous improvement plan.
• Act as the primary escalation point for critical identity incidents. The team provides 24x7 on-call coverage, while the manager is involved in critical escalations as required.
• Coordinate closely with Cybersecurity, Network, Cloud Operations, Modern Workspace, Applications, Service Desk, Local IT, project managers, and business stakeholders.

Technical Leadership and Architecture

• Serve as the technical authority for a complex hybrid identity environment supporting approximately 10,000 users.
• Lead architecture and technical decisions across on-premises Active Directory, Microsoft Entra ID, identity synchronization, authentication, authorization, and access services.
• Provide hands-on technical leadership for complex incidents, root-cause analysis, major changes, migrations, upgrades, and security remediation.
• Own technical standards for identity lifecycle, privileged and sensitive accounts, administrative accounts, service accounts, user and group management, devices, servers, and other directory objects.

Active Directory and Hybrid Identity

• Govern a complex on-premises Active Directory environment consisting of a central enterprise forest and additional forests supporting SAP and security-separated systems.
• Oversee AD DS, domain controllers, sites and services, DNS, DHCP, Group Policy, trusts, replication, Kerberos, NTLM, LDAP/LDAPS, PKI, NPS/RADIUS, and related Windows Server services.
• Lead forest and domain migrations, consolidation activities, lifecycle upgrades, functional-level planning, capacity management, monitoring, and proactive maintenance.
• Ensure reliable Microsoft Entra Connect and Cloud Sync operations and assess dependencies between on-premises directories, Microsoft Entra ID, Microsoft 365, and enterprise applications.

Microsoft Entra ID and Access Services

• Lead the design, governance, and operation of Microsoft Entra ID capabilities, including Conditional Access, MFA, PIM, SSO, Enterprise Applications, Application Proxy, Identity Governance, Access Reviews, and Lifecycle Workflows.
• Define secure access patterns based on Zero Trust and least privilege principles in coordination with the Cybersecurity team.
• Govern privileged identities and delegated administration within the IAM platforms. CyberArk remains owned by the Cybersecurity team and is managed through close coordination.

Reliability, Security, and Continuous Improvement

• Ensure high availability, backup readiness, disaster recovery, forest recovery, monitoring, patching, compliance, and operational resilience of identity services.
• Lead proactive health reviews, security hardening, audit remediation, vulnerability reduction, and retirement of legacy protocols and configurations.
• Drive PowerShell-based automation and code-driven processes, with appropriate version control, review, testing, and operational support.
• Ensure adherence to Incident, Problem, and Change Management practices, including RCA, preventive actions, risk assessment, and controlled implementation.

Preferred candidate profile