{"id":3355573,"url":"https://alion.io/job/gsk-lead-engineer-iam-lifecycle-management","title":"Lead Engineer - IAM Lifecycle Management","company":{"id":6649,"name":"GSK","domain":"gsk.com","url":"https://alion.io/company/gsk","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":85,"open_postings":64,"ghost_share":0.016,"stale_share":0.75,"repost_share":0.031,"time_to_fill_p50_days":16,"computed_at":"2026-11-03T05:54:40Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":34000,"max_usd":78000,"period":"year","method":"role_seniority_country_cell","sample_n":17},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"ASP.NET Core","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Express","optional":false},{"name":"GraphQL","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Nest.JS","optional":false},{"name":"Next.js","optional":false},{"name":"Pipeline as Code","optional":false},{"name":"TypeScript","optional":false},{"name":"AI Agents","optional":true},{"name":"C#","optional":true},{"name":"Configuration Management","optional":true},{"name":"Git","optional":true},{"name":"JavaScript","optional":true},{"name":"Node JS","optional":true},{"name":"React.js","optional":true},{"name":"Rest API","optional":true},{"name":"SOAP","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-10-27T19:49:39Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-03T07:20:14Z","board_verified":true,"closed_at":null,"days_open":6,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":6},"description":"GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems.\nOur diverse portfolio consists of vaccines, specialty medicines, and general medicines.\nThrough continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.\nJob Purpose:\nThe Lead Engineer, IAM Lifecycle Management will manage Azure DevOps pipeline engineering and release automation for secure IAM solutions, with primary responsibility for reusable YAML pipelines, artifact management, CI/CD, automated quality and security gates, deployment approvals, release traceability and rollback controls. The role will also deliver scalable lifecycle controls, microfrontend experiences and APIs using Next.js, Express.js, NestJS, GraphQL and .NET across cloud and on-premises environments.\nYou will establish and continuously improve Azure DevOps delivery capabilities for IAM applications, including pipeline architecture, reusable YAML templates, build and release automation, artifact management, automated testing, quality and security gates, environment promotion, deployment approvals, release evidence, operational traceability and rollback readiness. In partnership with product teams, application owners, HR, security, architecture, operations and audit stakeholders, you will then apply these capabilities to engineer and release secure IAM lifecycle solutions while improving automation, governance and identity-data quality.\nAbout the team:\nIAM Lifecycle Management owns the identity and account lifecycle end to end. The team ensures that people and non-human identities receive appropriate access when created, joining, moving, changing status or returning, and that access is suspended or removed promptly when no longer required across on-premises, cloud and SaaS systems.\nKey responsibilities:\nThis role will provide you the opportunity to lead key activities to progress your career. These responsibilities include some of the following:\nImplement and enhance Azure DevOps pipeline engineering for IAM solutions, including reusable YAML templates, build and release automation, artifact management, automated testing, code-quality and security gates, secrets handling, environment promotion, deployment approvals, release evidence, end-to-end traceability and tested rollback controls.\nDeliver assigned lifecycle engineering work to agreed scope, quality, security and timelines, identifying delivery risks and dependencies early.\nCollaborate with product owners, architects and engineering stakeholders to translate business, security, regulatory and architectural requirements into scalable, secure and maintainable technical solutions.\nEngineer end-to-end identity and account lifecycle capabilities, including creation, provisioning, modification, suspension, recertification and deprovisioning across on-premises, cloud and SaaS systems.\nImplement and enhance joiner, mover, leaver, rehire, contractor and non-human identity workflows, including trigger events, approval paths, account states, exception handling and recovery controls.\nIntegrate authoritative HR and identity sources with directories, governance platforms and target applications using connectors, APIs and event-driven services, while improving source-data quality and reconciliation.\nCreate functional and technical test scenarios, maintain requirements traceability and implementation evidence, and support remediation of defects, audit findings and control gaps.\nDevelop, enhance and support secure IAM applications using Next.js microfrontends, Express.js and NestJS services, GraphQL APIs and .NET components, applying reusable architecture patterns across the full solution stack.\nDesign and deliver accessible, responsive Next.js user interfaces and secure Express.js, NestJS or ASP.NET APIs for IAM lifecycle applications, with reusable components, API versioning, validation, authentication, authorisation, error handling, observability and performance optimisation.\nSupport colleagues through technical guidance, peer review, troubleshooting, reusable documentation and knowledge sharing.\nBasic Qualifications:\nBachelor’s degree in Computer Science, Information Technology or a related discipline, or equivalent practical experience.\nStrong hands-on experience designing and operating Azure DevOps CI/CD pipelines, including reusable YAML templates, pipeline-as-code practices, artifact and package management, automated unit and integration tests, code-quality and security gates, secrets handling, deployment approvals, environment promotion, release traceability and rollback controls.\nDemonstrated hands-on experience in identity and access management, including implementation and support of identity and account lifecycle capabilities.\nStrong understanding of joiner, mover, leaver, rehire, employee, contractor and non-human identity lifecycle patterns and their associated governance controls.\nExperience designing and configuring provisioning and deprovisioning workflows, approval processes, birthright and role-based access, account-state transitions and exception handling.\nExperience integrating IAM platforms with HR systems, Active Directory, Microsoft Entra ID, LDAP, databases, SaaS applications and custom applications.\nKnowledge of identity data models, account correlation, reconciliation, access reviews, certification, policy enforcement, orphan-account prevention and auditability.\nStrong hands-on development experience with Next.js, Express.js and NestJS, including microfrontend architecture, TypeScript, reusable user-interface components, secure backend services, authentication and authorisation integration, automated testing and performance optimisation.\nExperience delivering end-to-end UI and API solutions across Next.js microfrontends and Express.js, NestJS, GraphQL or .NET services, including responsive design, secure API development, input validation, automated testing, documentation and production troubleshooting.\nHands-on engineering experience with .NET and ASP.NET Web APIs, including secure service design, authentication and authorisation, integration with IAM platforms, automated testing, performance optimisation and production support.\nUnderstanding of least privilege, segregation of duties, account ownership, privileged-access dependencies and application-security practices.\nDemonstrated ability to deliver work independently to a high standard, with strong analytical, problem-solving, documentation and stakeholder-communication skills.\nPreferred Qualifications:\nAdvanced experience architecting enterprise-scale Azure DevOps delivery platforms for Next.js, Express.js, NestJS, GraphQL and .NET solutions, including governed reusable YAML templates, artifact lifecycle management, multi-stage CI/CD, automated quality and security controls, deployment approvals, release traceability, resilience and rollback strategies.\nAdvanced hands-on experience with SailPoint, Saviynt or a comparable IGA platform, including workflow, connector and policy configuration.\nExperience modernising or migrating identity lifecycle processes from legacy or bespoke solutions to a SaaS IGA platform.\nIntegration experience with LDAP, Active Directory, Microsoft Entra ID and custom applications using REST, SOAP, Microsoft Graph, GraphQL, TypeScript, .NET or equivalent technologies.\nExperience applying microfrontend design patterns, modular Next.js architecture, API-first development across Express.js, NestJS, GraphQL and .NET, automated testing, secure coding and Azure DevOps-based delivery in enterprise applications.\nExperience designing serverless integration services or event-driven components in Microsoft Azure.\nExperience with audit and control frameworks, including SOX and GxP, and producing evidence suitable for regulated environments.\nExperience implementing AI-enabled identity lifecycle management processes\nKnowledge of AI identity governance, including identity and access controls for AI agents and non-human identities\nRelevant certification such as CISSP, SailPoint, Saviynt, CIMP, Microsoft Azure or another IAM, cloud or security certification.\nExperience in pharmaceutical, life sciences, financial services or another highly regulated industry.\nTypical tools and technologies: Azure DevOps Pipelines and Artifacts; YAML, Git, CI/CD automation, quality and security gates, deployment approvals, release traceability and rollback controls; Next.js, React, TypeScript, microfrontend frameworks and UI component libraries; Express.js; .NET and ASP.NET Web APIs; REST and SOAP APIs, Microsoft Graph, JSON and SQL; SailPoint, Saviynt, Active Directory, Microsoft Entra ID, LDAP and Azure integration services.\n Skills\nAccount Lifecycle Management, AI Integration, Authentication Systems, Automation Technology, Certificate Management, Cloud Based Services, Computer Programming, Configuration Management (CM), Database Management, Directory Services, Identity Access Management (IAM), Identity Lifecycle Management, Implementation Management, Information Technology (IT) Risk Management, Infrastructure Security, IT Implementation, Life Cycle Management, Privileged Access Management (PAM), SailPoint IdentityIQ, SailPoint IdentityNow, Security Controls, System Monitors, TroubleshootingWhy GSK?\nUniting science, technology and talent to get ahead of disease together.\nGSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases - to impact health at scale.\nPeople and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.\nInclusion at GSK:\nAs an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process.\nPlease contact our Recruitment Team at  to discuss your needs.\nImportant notice to Employment businesses/ Agencies\nGSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.\nIt has come to our attention that the names of GlaxoSmithKline or GSK or our group companies are being used in co...","description_format":"text","description_chars":12868,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Prescription Drugs","Vaccines","Oncology Therapeutics","Infectious Disease Therapeutics"],"lifecycle":[{"event":"open","at":"2026-10-27T19:49:39Z"}],"visa":[],"liveness":{"score":56,"band":"ok","label":"Likely open","p_open":1,"p_active":0.621,"p_room":0.9,"age_days":6,"expected_fill_days":16,"reasons":["conf:3","stale_co","velocity","win:mid","comp:brand"],"computed_at":"2026-11-03T05:54:40Z"},"pay":null,"html_url":"https://alion.io/job/gsk-lead-engineer-iam-lifecycle-management","json_url":"https://alion.io/job/gsk-lead-engineer-iam-lifecycle-management.json","meta":{"generated_at":"2026-11-03T10:35:31Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":14747,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-04T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6649},"rest":"https://alion.io/mcp/rest/get_company?id=6649"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgsk-lead-engineer-iam-lifecycle-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgsk-lead-engineer-iam-lifecycle-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgsk-lead-engineer-iam-lifecycle-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gsk-lead-engineer-iam-lifecycle-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgsk-lead-engineer-iam-lifecycle-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3355573}},{"tool":"search_jobs","arguments":{"company":"gsk.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3355573},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}