Hybrid Analyst – Identity & Access Management

at Suntory Global Spirits

• Job title: Analyst – Identity & Access Management
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Azure, Cloud, Cyber Security, Python
• Location requirements: Hybrid, Gurgaon, India

About the role

• IAM Analyst in Cybersecurity supporting identity lifecycle management and access provisioning at Suntory Global Spirits. Hybrid role with three days in Gurgaon office, focusing on IAM solutions and security protocols.

Responsibilities

• Administer identity lifecycle management, joiner/mover/leaver (JML) processes, access provisioning, and access certifications using SailPoint IGA
• Manage user identities, groups, roles, entitlements, and conditional access policies in Microsoft Entra ID and on-premises Active Directory (AD)
• Support CyberArk Privileged Access Management (PAM) including privileged account onboarding, vaulting, access approvals, credential rotation, and session monitoring
• Administer ForgeRock for authentication, federation, single sign-on (SSO), and multi-factor authentication (MFA)
• Implement and enforce least privilege, role-based access control (RBAC), and segregation of duties (SoD)
• Perform periodic user access reviews, recertifications, and support internal and external audits
• Investigate, troubleshoot, and resolve IAM incidents, access requests, and escalations
• Partner with application owners to define access models, roles, and entitlement structures
• Maintain IAM documentation, standard operating procedures, and audit evidence
• Identify and access risks and recommend security control improvements

Requirements

• Bachelor’s degree in information technology, Cybersecurity, Information Security, or related field (or equivalent experience)
• 3–5 years of experience in IAM, IGA, access management, or cybersecurity operations
• Hands-on experience with SailPoint, Microsoft Entra ID, and CyberArk
• Strong understanding of authentication and authorization protocols including SAML, OAuth 2.0, OpenID Connect (OIDC)
• Experience with Active Directory (AD), LDAP, and hybrid identity environments
• Experience supporting cloud and hybrid IAM architectures
• Scripting or automation experience using PowerShell and/or Python
• IAM or security certifications preferred (e.g., Security+, CISSP, Azure Security Certification)
• Strong analytical, troubleshooting, and technical documentation skills

Benefits

• Working Hybrid (3 days in the Gurgaon office)