{"id":3322469,"url":"https://alion.io/job/incedo-technical-lead-iam","title":"Technical Lead - iAM","company":{"id":177799,"name":"Incedo","domain":"incedoinc.com","url":"https://alion.io/company/incedo","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Gurgaon, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":26000,"max_usd":57000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":14},"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"AWS","optional":false},{"name":"Boto3","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"Git","optional":false},{"name":"IAM","optional":false},{"name":"Least Privilege","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"PowerShell","optional":false},{"name":"Python","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-10-27T08:06:49Z","employer_posted_date":null,"last_verified_at":"2026-10-27T08:06:49Z","board_verified":false,"closed_at":null,"days_open":2,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":2},"description":"Tech Lead - IAM\n\nKey Responsibilities :\n\n- Own the technical design of identity discovery and access intelligence solutions, establishing how identity data is collected, correlated, and analyzed across Active Directory, Microsoft Entra ID, AWS, GCP, and OCI.\n\n- Develop advanced Python and PowerShell solutions to correlate identities across platforms, resolve duplicate or inconsistent records, map identity relationships, and establish a consolidated identity inventory.\n\n- Design automated entitlement analysis mechanisms to evaluate effective permissions, nested group memberships, inherited access, cross-account roles, service identities, and privileged access paths.\n\n- Build logic to identify toxic access combinations, excessive privileges, inactive entitlements, orphaned identities, unmanaged service accounts, and deviations from least-privilege principles.\n\n- Develop connectors and integration components using Microsoft Graph API, AWS SDK/boto3, Google Cloud APIs and CLI, and OCI APIs and CLI, handling pagination, rate limits, failures, authentication, and data consistency.\n\n- Engineer data pipelines that transform raw identity and permission data into normalized entitlement models suitable for access analytics, PAM onboarding, and governance assessments.\n\n- Define technical approaches for privileged identity classification, account criticality assessment, access tiering, and prioritization of accounts for PAM onboarding.\n\n- Convert identity analysis findings into technical specifications for privileged access controls, role redesign, access profiles, service account governance, and remediation workflows.\n\n- Design automated validation mechanisms to assess whether proposed access changes align with role definitions, security policies, and least-privilege requirements.\n\n- Optimize identity processing for large datasets through efficient querying, incremental data collection, parallel processing, and performance tuning.\n\n- Establish automated testing and data quality controls to validate connector accuracy, entitlement mappings, identity correlation, and risk detection results.\n\n- Lead technical investigations into complex identity and authorization issues, including permission inheritance, cross-cloud trust relationships, inconsistent access records, and unexpected privilege exposure.\n\n- Work with security architects, PAM specialists, cloud engineering teams, and governance stakeholders to validate technical findings and convert them into implementable security requirements.\n\n- Define reusable engineering patterns, technical documentation, and code quality standards while reviewing complex implementations and mentoring engineers.\n\nRequired Technical Skills :\n\n- 10 - 13 years of experience in software development, IAM engineering, identity automation, or security engineering, with strong hands-on development expertise.\n\n- Advanced Python and PowerShell skills, including API integrations, data processing, automation frameworks, and production-grade scripting.\n\n- Strong understanding of Active Directory and Microsoft Entra ID, including directory objects, group nesting, service principals, application identities, and authorization models.\n\n- Practical understanding of AWS IAM, GCP IAM, and OCI IAM, including effective permissions, role assumption, policy evaluation, service accounts, and resource hierarchies.\n\n- Experience with Microsoft Graph API, boto3, cloud APIs and CLIs, authentication mechanisms, pagination, and resilient integration design.\n\n- Strong SQL and data analysis skills for processing large datasets, reconciling identities, mapping entitlements, and identifying access anomalies.\n\n- Solid understanding of RBAC, least privilege, privileged access, entitlement management, identity lifecycle, and access governance.\n\n- Experience with Git, automated testing, CI/CD, secure coding, logging, and troubleshooting production integrations.\nSkills\niAM, Active Directory, Entra ID, Privilege Access Management, AWS, Identity Lifecycle Manager, Identity Governance & Administration","description_format":"text","description_chars":4051,"description_truncated":false,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["IT Consulting & Digital Transformation","Analytics & BI Consulting","Data Engineering & Migration Services"],"lifecycle":[{"event":"open","at":"2026-10-27T08:31:10Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":1,"expected_fill_days":29,"reasons":["seen:1","velocity","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/incedo-technical-lead-iam","json_url":"https://alion.io/job/incedo-technical-lead-iam.json","meta":{"generated_at":"2026-10-29T14:42:06Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22144,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":177799},"rest":"https://alion.io/mcp/rest/get_company?id=177799"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fincedo-technical-lead-iam"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fincedo-technical-lead-iam"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fincedo-technical-lead-iam"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/incedo-technical-lead-iam\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fincedo-technical-lead-iam"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3322469}},{"tool":"search_jobs","arguments":{"company":"incedoinc.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3322469},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}