Site Name: Bengaluru Luxor North Tower Posted Date: Jan 13 2025 Job purpose: We are looking for an Identity and Access Lifecycle management and governance SMEs, with a minimum of 5 years relevant experience and capable of delivering enterprise Identity Security solutions to join the Identity Access Management team at GSK. Technically, you will be comfortable working using Agile methodologies in a Scrum/SAFe environment, and have proven experience in design, build and manage modern IAM capabilities for Cloud and self-hosted applications. You will be working towards improving the maturity of IAM capabilities within GSK driving security and improvements in user experience. Your responsibilities include: Contribute to the end-to-end identity and account lifecycle processes within GSK. The primary responsibilities include ensuring provisioning/ deprovisioning secure management of access to applications and resources both on-premise and in the cloud. Support the product owner and architects in the entire lifecycle of user identities, from provisioning and modification to de-provisioning, ensuring accurate and timely access rights. Ensure GSK's regulatory requirements are met and continuously evolving and improving the underlying processes, strategies, and roadmap of capabilities and offerings by adopting new technologies where beneficial (such as automation, AI/ML, analytics, etc.). Ensure the security of IAM systems by implementing best practices and monitoring for vulnerabilities. Work with IT teams and stakeholders to understand requirements and provide technical support. Maintain comprehensive documentation of configurations, processes, and protocols. Continuously evaluate and implement new IAM technologies and best practices to enhance security and efficiency. SME for IAM technologies, including but not limited to Identity Governance and Administration (IGA), Account provisioning / deprovisioning, Reporting, Access Review, Password Management and integration with HR source systems Why you? Basic Qualifications: 10 to 12 years of Overall experien Experience of building and deploying web applications through CI/CD pipelines using GitHub Actions or Azure DevOps. Proficiency with DevOps practices and tools such as Docker, Kubernetes. Proficiency in infrastructure as code tools (Terraform, Ansible). Expertise in Module Federation implementation (Webpack, React) in implementing unified User Interface. Expertise in developing, documenting GraphQL API, schemas, types and resolvers Experience in development and execution of unit tests for the GraphQL API and ability to define and document GraphQL schema, types, and resolvers. Strong experience in designing, developing, and consuming RESTful and GraphQL APIs Hands-on experience with IGA tools for role management, access reviews, and certification processes. Knowledge of Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and other access control models. Hands-on implementation experience on SailPoint, Okta, RSA SecurID, ForgeRock, or other leading IAM platforms. Deep understanding of CyberArk and LDAP or Active Directory (AD) and integration with IAM systems. Familiarity with cloud IAM solutions and services offered by AWS, Google Cloud Platform (GCP), and Microsoft Azure. Proficiency in scripting languages such as PowerShell, Python, JavaScript and Node.js for automating IAM tasks and processes. Basis user capability in test automation tools such as PlayWright and proficiency in modern framework/libraries such as REACT Strong understanding of server-side frameworks such as Express.js and Next.js Education: Bachelor’s degree in Computer Science, Information Technology, or a related field. Soft Skills: Strong problem-solving abilities, excellent communication skills, and the ability to work collaboratively in a team environment Certifications: SailPoint Certified IdentityIQ Engineer (SCIIQE) / SailPoint Certified IdentityNow Engineer (SCIIE) CCSP – Certified Cloud Security Professional (nice to have) Preferred Qualifications: Knowledge of deploying, managing and monitoring applications in a Cloud environment such as Microsoft Azure or Google Cloud. Previously worked in a central IT team within a regulated environment such as the Pharmaceutical or Financial services. Basic development experience working with relational databases (e.g., MySQL, PostgreSQL, SQL Server). Inclusion & Diversity at GSK: At GSK, we are dedicated to fostering an inclusive and diverse work environment. We believe that diversity in our workforce drives innovation and growth, and we are committed to providing equal opportunities for all employees and applicants. We strive to create an atmosphere where all individual’s unique perspectives and experiences are valued and respected. All qualified applicants will receive equal consideration for employment without regard to their sex or gender, caste, pregnancy, gender identity/expression, physical and/or mental disability, or any other protected characteristic as per applicable law.“ Why GSK? Uniting science, technology and talent to get ahead of disease together. GSK is a global biopharma company with a special purpose – to unite science, technology and talent to get ahead of disease together – so we can positively impact the health of billions of people and deliver stronger, more sustainable shareholder returns – as an organisation where people can thrive. We prevent and treat disease with vaccines, specialty and general medicines. We focus on the science of the immune system and the use of new platform and data technologies, investing in four core therapeutic areas (infectious diseases, HIV, respiratory/ immunology and oncology). Our success absolutely depends on our people. While getting ahead of disease together is about our ambition for patients and shareholders, it’s also about making GSK a place where people can thrive. We want GSK to be a place where people feel inspired, encouraged and challenged to be the best they can be. A place where they can be themselves – feeling welcome, valued, and included. Where they can keep growing and look after their wellbeing. So, if you share our ambition, join us at this exciting moment in our journey to get Ahead Together. Important notice to Employment businesses/ Agencies GSK does not accept referrals from employment businesses and/or employment agencies in respect of the vacancies posted on this site. All employment businesses/agencies are required to contact GSK's commercial and general procurement/human resources department to obtain prior written authorization before referring any candidates to GSK. The obtaining of prior written authorization is a condition precedent to any agreement (verbal or written) between the employment business/ agency and GSK. In the absence of such written authorization being obtained any actions undertaken by the employment business/agency shall be deemed to have been performed without the consent or contractual agreement of GSK. GSK shall therefore not be liable for any fees arising from such actions or any fees arising from any referrals by employment businesses/agencies in respect of the vacancies posted on this site. It has come to our attention that the names of GlaxoSmithKline or GSK or our group companies are being used in connection with bogus job advertisements or through unsolicited emails asking candidates to make some payments for recruitment opportunities and interview. Please be advised that such advertisements and emails are not connected with the GlaxoSmithKline group in any way. GlaxoSmithKline does not charge any fee whatsoever for recruitment process. Please do not make payments to any individuals / entities in connection with recruitment with any GlaxoSmithKline (or GSK) group company at any worldwide location. Even if they claim that the money is refundable. If you come across unsolicited email from email addresses not ending in gsk.com or job advertisements which state that you should contact an email address that does not end in “gsk.com”, you should disregard the same and inform us by emailing askus@gsk.com, so that we can confirm to you if the job is genuine.