Manager IT-Identity & Access Management

• Manager IT-Identity & Access Management
• Company: PharmEasy
• Job Location: Bengaluru, Karnataka, India
• Employment Type: Full-time
• Joins us at PharmEasy:
• Launched in 2015, Pharm
• Easy is a consumer healthcare super app. Started with the sole purpose of making healthcare accessible C affordable to all, Pharm
• Easy today is India's leading C most trusted onlinehealthcare aggregator in the country.
• We provide on-demand, home-delivered access to a wide range of prescription pharmaceuticals,

diagnostic test services, OTC pharmaceuticals, C other consumer healthcare products, thereby serving your healthcare needs. Through our services, we ensure access to the best and most genuine health products, with the highest savings in the shortest time. Today, we deliver medicines in 1000+ cities in India, covering 19000+ pin codes. We offer diagnostic test services across Mumbai, Delhi, Chennai, Pune,Ahmedabad, Gandhi Nagar, Surat, Vadodara, Lucknow, Kolkata, Hyderabad, Bengaluru, and Jaipur.

Job Summary -

The IAM / IDM Manager will own the organizations Identity and Access Management program end-to-end, including Identity Provider (IdP) administration, single sign-on, multi-factor authentication, directory services, and the joiner-mover-leaver access lifecycle. The individual will work closely with IT infrastructure, security, and application teams to ensure secure, compliant, and well-governed identity architecture, while supporting the organizations broader

• Zero Trust and network security initiatives. The role also involves evaluating and managing IAM/IDM platforms and vendors to balance cost, security, and scalability.
• 1. Bachelors degree in Information Technology, Computer Science, or a related field.
• 2. Proven experience (69 years) in Identity and Access Management
• (IAM/IDM), access governance, or a related security role.
• 3. Hands-on experience administering cloud-based Identity Providers such as JumpCloud, Okta, or Azure AD; exposure to open-source identity platforms (Keycloak) preferred.
• 4. Strong understanding of SSO, SAML, OAuth2/OIDC, MFA, and
• LDAP/directory services.
• 5. Experience managing identity in cloud-first, directory-as-a-service environments (without traditional Active Directory) is an advantage.
• 6. Working knowledge of Privileged Access Management (PAM) and Zero Trust Network Access (ZTNA) principles.
• 7. Experience with Joiner-Mover-Leaver (JML) lifecycle automation and
• periodic access certification/review processes.
• 8. Understanding of regulatory and compliance frameworks.
• 9. Relevant certifications preferred: CISSP, CISA, CIAM, or vendor-specific IAM certifications.
• 10. Strong analytical and vendor evaluation skills, including experience running IAM tool POCs and RFPs.
• 11. Excellent stakeholder management, documentation, and communication skills
• Roles and Responsibilities
• 1. Identity Provider (IdP) & SSO Management:
• Administer and manage the organizations Identity Provider platform(s) for endpoint and application authenticationacross Windows and macOS environments.
• Own the roadmap for IdP evaluation, migration, and vendor management (e.g., JumpCloud, Zoho Directory,Keycloak, OpenIDM).
• Configure and maintain SSO integrations across enterprise SaaS and business applications.2.
• Access Lifecycle & Governance:
• Manage end-to-end Joiner-Mover-Leaver (JML) processes to ensure timely provisioning and de-provisioning of access.
• Conduct periodic access reviews and certifications to ensure least-privilege access across systems.
• Define and maintain role-based access control (RBAC) models and access policies.3.
• Authentication & Zero Trust Enablement:
• Drive enterprise-wide MFA adoption and enforcement.
• Collaborate with the network security team to align IAM architecture with the organizations Zero Trust NetworkAccess (ZTNA) initiatives.
• Support integration of IAM controls with endpoint and network security tooling.4.
• Privileged Access Management:
• Implement and manage PAM controls for privileged/admin accounts across servers, network devices, and applications.
• Monitor and audit privileged session activity and enforce just-in-time access where applicable.5.
• Compliance & Risk Management:
• Ensure IAM processes and controls align with ISO 27001, HIPAA, and Indias DPDP Act requirements.
• Support internal and external audits with IAM evidence, access logs, and compliance reports.
• Identify and remediate identity-related risks and control gaps.6.
• Vendor Evaluation & Cost Optimization:
• Run POCs and RFPs for IAM/IDM tools and platforms, evaluating cost, security, and scalability tradeoffs.
• Manage vendor relationships and contract renewals for identity platforms.7.
• Reporting and Analytics:
• Generate periodic reports on access compliance, identity risk posture, and IAM program metrics for leadership.
• Recommend process improvements based on identity analytics and audit findings. .