Technical Lead - iAM
First seen by Alion on Oct 27, 2026.
Tech Lead - IAM
Key Responsibilities :
- Own the technical design of identity discovery and access intelligence solutions, establishing how identity data is collected, correlated, and analyzed across Active Directory, Microsoft Entra ID, AWS, GCP, and OCI.
- Develop advanced Python and PowerShell solutions to correlate identities across platforms, resolve duplicate or inconsistent records, map identity relationships, and establish a consolidated identity inventory.
- Design automated entitlement analysis mechanisms to evaluate effective permissions, nested group memberships, inherited access, cross-account roles, service identities, and privileged access paths.
- Build logic to identify toxic access combinations, excessive privileges, inactive entitlements, orphaned identities, unmanaged service accounts, and deviations from least-privilege principles.
- Develop connectors and integration components using Microsoft Graph API, AWS SDK/boto3, Google Cloud APIs and CLI, and OCI APIs and CLI, handling pagination, rate limits, failures, authentication, and data consistency.
- Engineer data pipelines that transform raw identity and permission data into normalized entitlement models suitable for access analytics, PAM onboarding, and governance assessments.
- Define technical approaches for privileged identity classification, account criticality assessment, access tiering, and prioritization of accounts for PAM onboarding.
- Convert identity analysis findings into technical specifications for privileged access controls, role redesign, access profiles, service account governance, and remediation workflows.
- Design automated validation mechanisms to assess whether proposed access changes align with role definitions, security policies, and least-privilege requirements.
- Optimize identity processing for large datasets through efficient querying, incremental data collection, parallel processing, and performance tuning.
- Establish automated testing and data quality controls to validate connector accuracy, entitlement mappings, identity correlation, and risk detection results.
- Lead technical investigations into complex identity and authorization issues, including permission inheritance, cross-cloud trust relationships, inconsistent access records, and unexpected privilege exposure.
- Work with security architects, PAM specialists, cloud engineering teams, and governance stakeholders to validate technical findings and convert them into implementable security requirements.
- Define reusable engineering patterns, technical documentation, and code quality standards while reviewing complex implementations and mentoring engineers.
Required Technical Skills :
- 10 - 13 years of experience in software development, IAM engineering, identity automation, or security engineering, with strong hands-on development expertise.
- Advanced Python and PowerShell skills, including API integrations, data processing, automation frameworks, and production-grade scripting.
- Strong understanding of Active Directory and Microsoft Entra ID, including directory objects, group nesting, service principals, application identities, and authorization models.
- Practical understanding of AWS IAM, GCP IAM, and OCI IAM, including effective permissions, role assumption, policy evaluation, service accounts, and resource hierarchies.
- Experience with Microsoft Graph API, boto3, cloud APIs and CLIs, authentication mechanisms, pagination, and resilient integration design.
- Strong SQL and data analysis skills for processing large datasets, reconciling identities, mapping entitlements, and identifying access anomalies.
- Solid understanding of RBAC, least privilege, privileged access, entitlement management, identity lifecycle, and access governance.
- Experience with Git, automated testing, CI/CD, secure coding, logging, and troubleshooting production integrations.
Skills
iAM, Active Directory, Entra ID, Privilege Access Management, AWS, Identity Lifecycle Manager, Identity Governance & Administration