24 days ago
Gurgaon, IndiaSenior
Responsibilities
- Administer and develop Anaplan’s SailPoint IGA platform, including joiner-mover-leaver processes, application connectors, role models, lifecycle rules, and access certification campaigns.
- Help evaluate, select, and initially implement a PAM solution covering privileged account discovery, vaulting, JIT access, session monitoring, and credential rotation.
- Develop governance and lifecycle controls for non-human identities such as service accounts, API keys, secrets, certificates, and OAuth tokens.
- Contribute to identity security policies and least-privilege access models for AI agents and automated workflows.
- Build scripts, integrations, and tooling for identity provisioning, de-provisioning, access requests, and lifecycle automation.
- Support access reviews, SoD policy enforcement, audit reporting, and identity controls for SOC 2 and ISO 27001 compliance.
- Contribute to Zero Trust identity architecture across cloud and on-premises environments.
- Collaborate with HR, IT, Engineering, and Security teams and communicate identity risks, control gaps, and remediation plans.
Requirements
- Hands-on experience administering an enterprise IGA platform, preferably SailPoint IdentityNow or IdentityIQ, including lifecycle management, access certifications, connector configuration, role management, and lifecycle rule development.
- Strong understanding of PAM concepts including privileged account vaulting, session recording, JIT access, and credential rotation; PAM evaluation or implementation experience is advantageous.
- Experience governing non-human identities at scale, including service accounts, API keys, OAuth/OIDC tokens, certificates, and secrets.
- Understanding of identity and access challenges involving AI agents and agentic workflows.
- Strong working knowledge of SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, and Kerberos.
- Hands-on experience with cloud IAM platforms, particularly AWS IAM, Microsoft Entra ID or Azure AD, and/or GCP IAM, including PIM capabilities.
- Proficiency in one or more identity-automation languages, such as Python, PowerShell, or Java/BeanShell for SailPoint rule development.
- Familiarity with HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, or CyberArk Conjur.
- Familiarity with NIST SP 800-63, NIST CSF, ISO 27001, and SOC 2, and how IGA and PAM controls support audits.
- Strong communication, documentation, and cross-functional collaboration skills.
About Anaplan
Anaplan builds a cloud platform for enterprise planning, forecasting, and scenario modeling used by finance, supply chain, sales, and workforce teams. It sells subscription software and related services to large organizations that need connected, cross-functional planning. Founded in 2006 and headquartered in Miami, Florida, Anaplan was acquired by Thoma Bravo in 2022 after previously trading on the NYSE.