Senior Manager – Identity & Cloud Security

Senior Manager – Identity & Cloud Security

Reports to: Chief Information Security Officer

Location: Hyderabad, India

About the Role

We are looking for an experienced identity and cloud security leader to own how we protect access and secure our cloud estate worldwide. You will be the enterprise owner of Identity and Access Management — covering workforce, partner, customer, service, and workload identities — and will own cloud security across AWS, Azure, and Microsoft 365, with lighter-touch accountability for SaaS security posture. This is both a leadership role and a strategic one: you will set the direction for how our identity and cloud security capabilities evolve, and lead a small, highly skilled engineering team supported by specialist delivery partners.

What You Will Do

Lead the global identity and cloud security function — setting strategy, architecture, and engineering direction, and managing a team of up to four engineers plus contingent labor, managed services, and integration partners.

Own enterprise Active Directory and Microsoft Entra ID, driving modern authentication and access control including MFA, passwordless, self-service password reset, Conditional Access, and role-based access control.

Lead single sign-on and federation across the application estate using SAML, OAuth 2.0, OIDC, and SCIM, and advance Zero Trust and adaptive, risk-based access.

Own identity governance and privileged access — Saviynt IGA, PAM and PIM, identity lifecycle and joiner-mover-leaver processes, access and privileged access reviews, and service-account governance.

Deploy Identity Threat Detection and Response (ITDR) and Identity Security Posture Management (ISPM) to find and close identity attack paths.

Define cloud security architecture, guardrails, and secure baselines for AWS and Azure, and mature posture and workload protection through CSPM, CWPP, CIEM, and CNAPP tooling, policy-as-code, and DevSecOps practice.

Own the Microsoft 365 security control baseline — Defender for Office 365, Defender for Cloud Apps, Microsoft Purview, DLP, and data classification — alongside SaaS security posture management.

Support audit, governance, and risk management across SOX, ISO 27001, NIST, and CIS Benchmarks, and act as the identity and cloud authority during incident response and secure design reviews.

Basic Qualifications

A degree in Computer Science, Information Technology, Cyber Security, or a related field.

10+ years in cybersecurity or identity and access management, including 5+ years leading teams in a global environment.

Deep hands-on expertise with Active Directory and Microsoft Entra ID, including Conditional Access, PIM, and Identity Protection.

Proven delivery of IGA and PAM platforms at enterprise scale — Saviynt or equivalent — covering identity lifecycle, JML, and access reviews.

Strong command of federation and modern authentication standards: SAML, OAuth 2.0, OIDC, SCIM, RBAC and ABAC.

Demonstrable experience securing AWS and Azure at scale, with working knowledge of native security services such as GuardDuty, Security Hub, CloudTrail, KMS, Microsoft Defender for Cloud, Azure Policy, Key Vault, and Sentinel.

Experience with Microsoft 365 security and data protection, including Defender, Purview, and DLP.

Working knowledge of NIST CSF, ISO 27001, CIS Benchmarks, and SOX, with experience leading internal and external audits.

Preferred Qualifications

Certifications such as CISSP, CISM, or CCSP, or platform certifications in Microsoft, AWS, Saviynt, or leading PAM products.

Experience with CIAM, ZTNA, SaaS security posture management (SSPM), CASB, or secure service edge.

Exposure to manufacturing environments and ISA 62443, or to identity workstreams in carve-outs, divestitures, and tenant-to-tenant migrations.