{"id":3493276,"url":"https://alion.io/job/gsk-principal-iam-lifecycle-management","title":"Principal - IAM Lifecycle Management","company":{"id":6649,"name":"GSK","domain":"gsk.com","url":"https://alion.io/company/gsk","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":53,"ghost_share":0,"stale_share":0.83,"repost_share":0,"time_to_fill_p50_days":16,"computed_at":"2026-11-01T06:10:25Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":["IN"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":33000,"max_usd":77000,"period":"year","method":"role_seniority_country_cell","sample_n":17},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"Git","optional":false},{"name":"GitHub","optional":false},{"name":"IAM","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Rest API","optional":false},{"name":"SQL","optional":false},{"name":".NET","optional":true},{"name":"AI Agents","optional":true},{"name":"Anomaly Detection","optional":true},{"name":"C#","optional":true},{"name":"Configuration Management","optional":true},{"name":"GraphQL","optional":true},{"name":"JavaScript","optional":true},{"name":"Nest.JS","optional":true},{"name":"Next.js","optional":true},{"name":"Node JS","optional":true},{"name":"React.js","optional":true},{"name":"SOAP","optional":true},{"name":"TypeScript","optional":true}],"status":"live","first_seen_at":"2026-10-27T00:00:00Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-11-01T12:25:48Z","board_verified":true,"closed_at":null,"days_open":5,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":5},"description":"GSK remains committed to achieving bold commercial ambitions for the future. By 2031, we aim to deliver £40 billion in annual sales, leveraging our existing strong performance momentum to significantly increase our positive impact on the health of billions of patients globally. Our Ahead Together strategy is centred on early intervention to prevent and alter the course of disease, thereby protecting people and supporting healthcare systems.\nOur diverse portfolio consists of vaccines, specialty medicines, and general medicines.\nThrough continuous innovation and a dedicated focus on scientific and technical excellence, we strive to develop and launch new, groundbreaking treatments that address critical health challenges.\nJob Purpose:\nThe Principal, IAM Lifecycle Management will drive the design, engineering and delivery of enterprise identity and account lifecycle capabilities and act as the senior technical authority for the capability. This senior individual contributor role translates business, security, architecture and regulatory requirements into scalable lifecycle controls, automation and integrations across cloud, on-premises and SaaS environments. The role owns complex implementations, establishes reusable engineering practices and guides technical delivery across joiner, mover, leaver, rehire, contractor, partner and non-human identity scenarios.\nAbout the team:\nIAM Lifecycle Management owns the identity and account lifecycle end to end. The team ensures that workforce, contractor, partner and non-human identities receive appropriate access when created, joining, moving, changing status or returning, and that access is suspended or removed promptly when no longer required. It improves lifecycle automation, identity-data quality, governance controls and service reliability across on-premises, cloud and SaaS systems.\nKey responsibilities:\nThis role will provide you the opportunity to take ownership of key activities to progress your career. These responsibilities include some of the following:\nOwn complex IAM lifecycle workstreams from discovery and requirements analysis through solution design, configuration, testing, deployment and operational transition.\nAct as the senior technical subject matter expert for IAM Lifecycle Management, advising product, architecture, engineering, security, risk, audit and business stakeholders.\nMentor engineers, review solution designs and code, and establish reusable patterns, standards, documentation and engineering practices.\nDesign and deliver end-to-end identity and account lifecycle capabilities, including creation, provisioning, modification, suspension, recertification and deprovisioning across on-premises, cloud and SaaS systems.\nDrive joiner, mover, leaver, rehire, contractor, partner and non-human identity lifecycle scenarios, including trigger events, approval orchestration, account states, exception handling and recovery controls.\nDrive complex application onboarding initiatives and integrations between authoritative HR and identity sources, directories, IGA platforms and target applications using connectors, APIs and event-driven services.\nImplement and improve governance controls for least privilege, segregation of duties, birthright and role-based access, account ownership, orphan-account prevention, access reviews and policy compliance.\nDrive improvements in identity correlation, reconciliation, source-data quality, reporting, monitoring, observability and engineering telemetry to improve lifecycle accuracy and service reliability.\nOwn root-cause analysis and resolution of complex lifecycle defects, control failures, production incidents and cross-platform integration issues.\nContribute technical insight to product roadmaps, technology assessments and delivery planning, identifying dependencies, risks and opportunities for automation, resilience and user-experience improvement.\nPromote secure engineering, automated testing, CI/CD, API governance, accessibility, performance optimisation, observability and controlled deployment practices.\nEnsure IAM processes, implementation evidence and control operation meet regulatory, audit and risk-management requirements, including those of highly regulated environments.\nBasic Qualifications:\nBachelor’s degree in Computer Science, Information Technology or a related discipline, or equivalent practical experience.\nTen or more years of relevant IAM experience, including significant hands-on engineering and technical ownership of complex identity and account lifecycle implementations.\nStrong implementation experience with an enterprise Identity Governance and Administration platform such as SailPoint, Saviynt, LINX or an equivalent product.\nProven experience designing and delivering lifecycle solutions for joiner, mover, leaver, rehire, employee, contractor, partner and non-human identity scenarios.\nDeep understanding of provisioning and deprovisioning workflows, approval orchestration, birthright and role-based access, account-state transitions, exception handling and policy enforcement.\nStrong knowledge of identity data models, account correlation, reconciliation, access reviews, certification, segregation of duties, orphan-account prevention and audit evidence.\nExperience integrating IAM platforms with HR systems, Active Directory, Microsoft Entra ID, LDAP, databases, SaaS platforms and custom applications.\nStrong engineering capability with REST APIs, JSON, SQL, scripting and secure event-driven integration patterns, with the ability to troubleshoot transactions across connected systems.\nExperience owning application onboarding and complex cross-functional technical delivery from design through testing, deployment and operational handover.\nExperience delivering secure, observable and resilient IAM services using automated testing, Git-based version control and CI/CD pipelines such as GitHub or Azure DevOps.\nStrong troubleshooting and root-cause analysis skills across distributed IAM services, integrations, workflows and data flows.\nAbility to mentor engineers and communicate complex technical concepts clearly to engineering, product, business, risk and audit stakeholders.\nPreferred Qualifications:\nAdvanced implementation experience with a SaaS-based identity security or leading IGA platform, including workflow, connector and policy configuration.\nExperience modernising or migrating legacy or bespoke lifecycle solutions to a SaaS IGA platform.\nExperience designing serverless, containerised or event-driven integration services in Microsoft Azure.\nHands-on experience with GraphQL, TypeScript, Node.js, Next.js, NestJS, Apollo, .NET or API federation where these support IAM integration, administration and self-service experiences.\nExperience applying API-first, microfrontend, reusable component, secure coding and automated testing practices in enterprise applications.\nExperience with policy-as-code, identity analytics, automated testing and engineering telemetry for IAM capabilities.\nExperience applying AI or analytics to identity-data quality, access recommendations, anomaly detection or governance improvement, and knowledge of identity controls for AI agents and other non-human identities.\nExperience with control frameworks such as SOX and GxP and producing evidence suitable for regulated environments.\nRelevant IAM, cloud or security certification, such as CISSP, SailPoint, Saviynt, CIMP or Microsoft Azure.\nExperience working in a central IT or cyber security team within pharmaceuticals, healthcare, financial services or another highly regulated industry.\nTypical tools and technologies: SailPoint, Saviynt, LINX, Active Directory, Microsoft Entra ID, LDAP, HR source systems, Next.js, NestJS, Apollo GraphQL, TypeScript, Node.js, .NET, REST and SOAP APIs, Microsoft Graph, JSON, SQL, Azure integration services, GitHub and Azure DevOps.\n Skills\nAccess Governance, Account Lifecycle Management, Authentication Systems, Automation Technology, Certificate Management, Cloud Based Services, Computer Programming, Configuration Management (CM), Database Management, Directory Services, IBM Engineering Lifecycle Management (ELM), Identity Access Management (IAM), Identity Lifecycle Management, Information Technology (IT) Risk Management, Infrastructure Security, Life Cycle Management, Platform Development, Privileged Access Management (PAM), SaaS Integration, Security Controls, System Monitors, TroubleshootingWhy GSK?\nUniting science, technology and talent to get ahead of disease together.\nGSK is a global biopharma company with a purpose to unite science, technology and talent to get ahead of disease together. We aim to positively impact the health of 2.5 billion people by the end of the decade, as a successful, growing company where people can thrive. We get ahead of disease by preventing and treating it with innovation in specialty medicines and vaccines. We focus on four therapeutic areas: respiratory, immunology and inflammation; oncology; HIV; and infectious diseases - to impact health at scale.\nPeople and patients around the world count on the medicines and vaccines we make, so we’re committed to creating an environment where our people can thrive and focus on what matters most. Our culture of being ambitious for patients, accountable for impact and doing the right thing is the foundation for how, together, we deliver for patients, shareholders and our people.\nInclusion at GSK:\nAs an employer committed to Inclusion, we encourage you to reach out if you need any adjustments during the recruitment process.\nPlease contact our Recruitment Team at  to discuss your needs.\nImportant notice to Employment businesses/ Agencies\nGSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site.\nIt has come to our attention that the names of GlaxoSmithKline or GSK or our group companies are being used in connection with bogus job advertisements or through unsolicited emails asking candidates to make some payments for recruitment opportunities and interview. Please be advised that such advertisements and emails are not connected with the GlaxoSmithKline group in any way.\nGlaxoSmithKline does not charge any fee whatsoever for recruitment process. Please do not make payments to any individuals / entities in connection with recruitment with any GlaxoSmithKline (or GSK) group company at any worldwide location. Even if they claim that the money is refundable.\nIf you come across unsolicited email from email addresses not ending in gsk.com or job advertisements which state that you should contact an email address that does not end in “gsk.com”, you should disregard the same and inform us by emailing , so that we can confirm to you if the job is genuine.","description_format":"text","description_chars":11597,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"India","iso":"IN","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Prescription Drugs","Vaccines","Oncology Therapeutics","Infectious Disease Therapeutics"],"lifecycle":[{"event":"open","at":"2026-10-30T00:29:54Z"}],"visa":[],"liveness":{"score":62,"band":"ok","label":"Likely open","p_open":1,"p_active":0.62,"p_room":1,"age_days":5,"expected_fill_days":16,"reasons":["conf:6","stale_co","velocity","win:early","comp:brand"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/gsk-principal-iam-lifecycle-management","json_url":"https://alion.io/job/gsk-principal-iam-lifecycle-management.json","meta":{"generated_at":"2026-11-01T17:01:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":26119,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":6649},"rest":"https://alion.io/mcp/rest/get_company?id=6649"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fgsk-principal-iam-lifecycle-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fgsk-principal-iam-lifecycle-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fgsk-principal-iam-lifecycle-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/gsk-principal-iam-lifecycle-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fgsk-principal-iam-lifecycle-management"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3493276}},{"tool":"search_jobs","arguments":{"company":"gsk.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3493276},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}