Technical Business Analyst

• The Core Identity Platforms & Solutions team is seeking a technically strong and security-aware Business Analyst to support the delivery and operationalisation of Privileged Access Management (PAM) initiatives, including Privileged Remote Access (PRA) and Non-Human Identity (NHI).
• This offshore role requires expert-level knowledge of Active Directory (AD), and Entra ID (Azure AD), along with a solid understanding of Windows and Linux operating system security policies, Role-Based Access Control (RBAC), and Azure Desired State Configuration (DSC).
• The candidate will work closely with engineering, audit, and cybersecurity teams to ensure secure, compliant, and scalable access management across enterprise platforms.

Business Analysis & Requirements Gathering

• Analyse and document business and technical requirements for PAM use cases including PRA and NHI.
• Collaborate with stakeholders to define access control models, role definitions, and entitlement workflows.
• Support audit and compliance activities by identifying gaps and proposing remediation plans.

Technical Expertise & Identity Integration

• Provide subject matter expertise on AD and Entra ID directory structures, sync models, and role-based access controls.
• Support the implementation of PRA solutions including secure remote access workflows, session monitoring, and break-glass access.
• Assist in the onboarding and lifecycle management of non-human identities into Saviynt and other IGA platforms.
• Apply operational knowledge to assess and document privileged access across Windows and Linux environments.
• Evaluate and align OS-level security policies with PAM controls and RBAC models.
• Support Azure DSC configurations for enforcing secure baseline states and compliance.

Data Analysis & Reporting

• Conduct analysis of privileged access data, orphan accounts, and role assignments using PowerShell, SQL, and KQL.
• Generate reports for audit, risk, and operational teams to track compliance and access hygiene.

Cybersecurity & IAM Best Practices

• Ensure alignment with cybersecurity principles including least privilege, zero standing access, and secure credential management.
• Apply IAM best practices across directory services, vaulting, and secrets management.
• Support directory clean-up and role reduction initiatives in AD and Entra ID.

Change Management & Stakeholder Engagement

• Participate in change management activities including impact assessments, communications, and training.
• Engage with internal and external stakeholders to ensure smooth rollout and adoption of PAM controls.
• Draft and deliver targeted communications for technical and business audiences.

Documentation & Enablement

• Create and maintain process documentation, user guides, and FAQs for PAM workflows.
• Support UAT, backlog grooming, and sprint planning activities.
• Contribute to operational readiness by documenting support models and escalation paths.

• Exp: 5 to 8 years

• Proven experience as a Technical BA in PAM, IAM, or cybersecurity domains.
• Expert-level knowledge of Active Directory and Entra ID (Azure AD).
• Strong understanding of Wintel operations and OS-level security policies for Windows and Linux.
• Experience with Saviynt or similar IGA platforms.
• Familiarity with PRA and NHI concepts and workflows.
• Experience implementing and managing RBAC models.
• Hands-on experience with Azure DSC and configuration management.
• Strong analytical skills with proficiency in PowerShell, SQL, and KQL.
• Knowledge of cybersecurity principles and IAM best practices.
• Experience supporting change management and audit readiness.
• Excellent communication and stakeholder management skills.

Desirable Qualifications

• Microsoft SC-300 – Identity and Access Administrator.
• ITILv4 Foundation or higher.
• CISSP or equivalent cybersecurity certification.
• Experience with ServiceNow, CMDB, and ITSM platforms.
• Familiarity with secrets management tools (e.g., Azure Key Vault, HashiCorp Vault).