Global Access Management (GAM) Engineer

About the role

An experienced Global Access Management (GAM) Engineer is sought to lead the implementation and operational management of Identity Governance and Administration (IGA) and Identity and Access Management (IAM) solutions. The role covers access governance, identity lifecycle management, role-based access control and Segregation of Duties (SoD), and involves designing access frameworks, automating identity workflows, running access certification campaigns and ensuring compliance with security policies and regulations.

Key responsibilities

• Design, implement and manage IAM/IGA solutions on leading platforms, integrating with HR, Active Directory, ITSM and PAM systems
• Configure RBAC, role mining, approval structures and access exception handling
• Automate joiner, mover and leaver (JML) workflows, including provisioning, modification and de-provisioning
• Plan and run User Access Review (UAR) and access certification campaigns
• Design and maintain SoD frameworks, rulesets, conflict remediation and mitigating controls
• Manage application onboarding, access models, role design and standardised onboarding procedures
• Integrate IAM/IGA with PAM platforms and handle emergency access, break-glass scenarios and access exceptions
• Monitor operational SLAs and KPIs, maintain dashboards and support internal and external audits
• Manage the IAM/IGA/PAM toolchain lifecycle, including upgrades and vendor coordination, and prepare operational documentation and audit-ready evidence

Required profile

• 7-10 years of experience in IAM, IGA, access governance or access management roles
• Hands-on experience with major IAM/IGA platforms and practical knowledge of directory services such as Microsoft Active Directory and LDAP
• Experience designing and running enterprise-scale UAR and access certification campaigns
• Strong understanding of RBAC, access models, approval workflows and role design
• Experience with SoD frameworks and integrating IAM/IGA with PAM platforms
• Preferred: exposure to PAM solutions, legacy systems or OT environments, audit and compliance support, and vendor certifications in IAM, IGA or PAM

Required skills

• IAM/IGA platforms, Active Directory, LDAP, MFA, SSO and service accounts
• ITSM tools and request management workflows
• Ability to define and monitor SLAs and KPIs
• Strong analytical, problem-solving, documentation and stakeholder management skills