IT Security Analyst - Identity & Access Management (IAM)
Support and troubleshoot IAM platforms (Active Directory, Microsoft Entra ID, SSO, MFA) and investigate security events via SIEM/EDR tools in a 24x7 rotation shift, handling access lifecycle and compliance activities.
- Compensation
- Not disclosed
- Location
- IND - Chennai, Neville Towers
- Work setup
- Not specified
- Seniority
- Not specified
- Employment
- Not specified
- Experience
- 4+ years
- Category
- Security
- Posted
Skills
Must have
- Bachelor's degree in Computer Science, IT, Cybersecurity, or related field
- 4-6 years of hands-on experience in cybersecurity, IAM, security operations, or related IT disciplines
- Experience supporting enterprise IAM platforms and identity lifecycle management processes
- Experience with Microsoft Entra ID (Azure AD), Active Directory, authentication services, and MFA technologies
- Understanding of user lifecycle management, access control models, RBAC, and identity governance concepts
- Experience investigating security events and performing analysis across multiple security technologies
- Working knowledge of SIEM platforms and security event monitoring
- Familiarity with EDR/XDR platforms such as Microsoft Defender, CrowdStrike, or similar
- Experience supporting cloud environments, particularly Microsoft Azure
- Experience with ServiceNow or similar IT Service Management platforms
- Basic scripting or automation experience using PowerShell, Python, or similar
- Strong analytical, troubleshooting, and problem-solving skills
- Strong written and verbal communication skills
- Ability to independently prioritize and manage multiple operational activities in a fast-paced environment
Nice to have
- Experience with Microsoft Sentinel
- Experience supporting Conditional Access and Identity Governance solutions
- Experience participating in access certification activities and audit support engagements
- Experience with security automation initiatives
- Exposure to AWS identity and access management concepts
- Industry certifications such as Security+, SC-900, SC-300, AZ-500, CISSP, or equivalent
Full description
Work Location: Pune or Chennai
Shift: 24x7 Rotation Shifts
##
Position Summary
This is a technical role requiring prior experience in Identity and Access Management (IAM), cybersecurity operations, and enterprise security practices. The Security Analyst II is responsible for supporting and troubleshooting identity platforms, monitoring and investigating security events, enforcing security controls, and assisting with operational and compliance activities across the enterprise.
The successful candidate will demonstrate strong analytical and troubleshooting skills while working independently and collaboratively within a global cybersecurity team.
##
Key Responsibilities
- Respond to and resolve IAM incidents and service tickets within defined SLAs while following established operational procedures.
- Perform administration, troubleshooting, and operational support across IAM platforms including Active Directory, Microsoft Entra ID (Azure AD), Single Sign-On (SSO), Multi-Factor Authentication (MFA), and identity lifecycle management processes.
- Process and troubleshoot user onboarding, offboarding, provisioning, de-provisioning, and access modification requests across enterprise systems.
- Support role-based access control (RBAC), least-privilege enforcement, and privileged access management processes.
- Work closely with IT support teams, application owners, and business stakeholders to investigate and resolve access-related issues.
- Monitor, triage, and investigate alerts generated by SIEM, EDR, IAM, cloud, and infrastructure security platforms.
- Correlate events across multiple security tools to establish incident context and identify potential security concerns.
- Perform analysis using logs, IP addresses, domains, URLs, hashes, user activity, and threat intelligence sources.
- Investigate security events including suspicious login activity, MFA issues, phishing attempts, unauthorized access attempts, privilege escalation activity, malware alerts, and endpoint security events.
- Identify false positives and distinguish them from legitimate security incidents.
- Escalate complex incidents and technical issues to senior engineers and subject matter experts as appropriate.
- Participate in access reviews, certification campaigns, audits, and compliance evidence collection activities.
- Assist with implementation and support of IAM security controls and automation initiatives.
- Contribute to the creation and maintenance of operational runbooks, knowledge articles, and process documentation.
- Identify recurring issues and recommend process improvements and automation opportunities.