Sr. Identity Management Engineer

Do you want to be part of an inclusive team that works to develop innovative therapies for patients? Every day, we are driven to develop and deliver innovative and effective new medicines to patients and physicians.  If you want to be part of this exciting work, you belong at Astellas!

Astellas Pharma Inc. is a pharmaceutical company conducting business in more than 70 countries around the world. We are committed to turning innovative science into medical solutions that bring value and hope to patients and their families. Keeping our focus on addressing unmet medical needs and conducting our business with ethics and integrity enables us to improve the health of people throughout the world. For more information on Astellas, please visit our website at www.astellas.com.

Purpose and Scope:

As an Identity and Access Management (IAM) Engineer, you will play a key role in protecting our organization’s digital assets by ensuring secure, compliant, and efficient management of user identities and access across systems and applications. This position has been established as part of our initiative to strengthen internal IAM operations, enhance automation in identity lifecycle management, and advance towards a ‘best in industry’ access governance framework.

This position is based in Bengaluru and will require some on-site work.

Responsibilities and Accountabilities:

• Design, deploy, and manage Identity Governance, Access Management, and Privileged Access solutions such as Entra ID, CyberArk, Azure SSO.
• Design and support implementation of MFA, SSO, and privileged access management solutions.
• Identify opportunities to improve operational efficiency through automation or process optimization.
• Hands on experience in performing administration activities on Active Directory, Azure AD, Entra ID, CyberArk.
• Troubleshooting experience in resolving end user issues of solutions: CyberArk, Entra ID , Entra SSO, On Prem AD.
• Experience in performing periodic access reviews, certification campaigns, and role-based access control (RBAC) reviews.
• Hands on experience in building custom configurations in CyberArk for CPM and PSM related use cases.
• Monitor and resolve IAM-related incidents and service requests within defined SLAs.
• Collaborate with HR, IT, and Security teams to ensure smooth joiner-mover-leaver (JML) processes.
• Assist in IAM policy enforcement, compliance audits, and reporting.
• Hands on Experience in process automation and scripting is preferred.
• Stay updated on emerging IAM trends, threats, and best practices.
• Document IAM processes and maintain standard operating procedures.

Required Qualifications:

• 12 to 14+ years of experience in Identity and Access Management.
• Hands-on experience with IAM/PAM tools – Entra ID. CyberArk, Azure SSO.
• Strong hands-on experience with:
  • CyberArk Core PAS (Vault, CPM, PVWA, PSM)
  • Microsoft Entra ID (Azure AD), Conditional Access, Identity Protection
  • Active Directory, LDAP, SAML, OAuth, OpenID Connect
  • Proficiency in scripting (PowerShell, Python) and automation tools.
  • Familiarity with cloud platforms (Azure, AWS, GCP) and hybrid environments.
  • Familiarity with ITSM tools (e.g., ServiceNow) and ticket management processes. 

• Strong collaborator with experience working across diverse teams.
• Analytical mindset with attention to detail and strong problem-solving skills.
• Excellent communication and collaboration skills.

Preferred Qualifications:

• Strong knowledge of Active Directory, Azure AD (Entra ID), CyberArk, SSO, and authentication mechanisms (SAML, OAuth, OIDC).
• Understanding of IAM governance, RBAC, and compliance standards (ISO 27001, SOX, GDPR).
• IAM certifications such as below is an advantage.
  • CyberArk Defender (mandatory)
  • CyberArk Sentry
  • CyberArk CCDE - Core PAS
  • Microsoft Certified: Identity and Access Administrator Associate

Supporting technology in healthcare industry experience is an advantage