Subject Matter Expert (Support&Ops)

Job Summary

JOB DESCRIPTION Access Management Engineer Global Access Management (GAM) | Service Desk 1. Position Details Role Title Access Management Engineer Alternate Titles Access Management Analyst / Identity & Access Management (IAM) Engineer – L1/L2 Function Global Access Management (GAM), operating as a specialist function within the Service Desk Workstream Service Desk Reports To Service Desk Manager (day-to-day supervision via Shift Leads) Location India Delivery Centre (offshore) Work Model 24x7 rotational shift Employment Type Full time Minimum Experience 2–3 years in a Global Access Management / Identity & Access Management role 2. Role Purpose The Access Management Engineer is responsible for the accurate, timely and compliant fulfilment of identity and access requests across the client estate, operating as part of the Global Access Management function within the Service Desk. The role sits at the point where user experience and security control meet: every request must be delivered quickly enough to keep people productive, and correctly enough that no user ends up with access they are not entitled to. The engineer manages the day-to-day execution of the joiner, mover and leaver lifecycle, role and entitlement assignment, group and distribution list administration, privileged access provisioning, and access-related incident resolution. The role operates to defined SLAs, documented SOPs and approval workflows, and is accountable for the audit evidence that demonstrates each action was authorised before it was performed. 3. Key Responsibilities 3.1 Identity Lifecycle Management (Joiner / Mover / Leaver) Joiner provisioning – create and enable user accounts, mailboxes, group memberships and baseline entitlements within agreed SLA, ensuring new starters are productive from day one. Mover processing – action role, department and location changes, applying the entitlement set for the new role and, critically, removing entitlements attached to the previous one to prevent access accumulation. Leaver revocation – disable accounts, revoke access and process mailbox and data handover within the mandated timeframe, treating terminations and involuntary exits as priority actions. Reconcile lifecycle events against the HR feed and authoritative source system, and escalate discrepancies, orphaned accounts and unactioned leavers. 3.2 Access Request Fulfilment Manage the Access Management queue end to end: triage, validate, action, document and close requests within SLA. Verify authorisation before action – confirm that the correct approvals, entitlement owner sign-off and business justification are in place. Where they are not, the request is returned or held, not fulfilled. Administer role-based access (RBAC), security groups, distribution lists, shared mailboxes, folder and file-share permissions, and application-level entitlements. Provision, modify and revoke access across in-scope enterprise, retail and business applications in line with documented entitlement models. Handle bulk and project-driven access requests (onboarding waves, restructures, application migrations, store openings) with appropriate validation and staging. 3.3 Privileged & Elevated Access Process privileged and administrative access requests through the Privileged Access Management (PAM) toolset, applying least-privilege and time-bound access principles. Manage checkout, expiry and revocation of elevated entitlements, and ensure temporary access is withdrawn on schedule rather than left standing. Maintain and evidence the segregation-of-duties controls that apply to sensitive and toxic-combination entitlements. 3.4 Security, Compliance & Audit Perform every action in line with client security policy, information security standards and regulatory obligations, including privacy requirements. Support periodic user access reviews, recertification campaigns and entitlement attestations: ex

Key Responsibilities

JOB DESCRIPTION Access Management Engineer Global Access Management (GAM) | Service Desk 1. Position Details Role Title Access Management Engineer Alternate Titles Access Management Analyst / Identity & Access Management (IAM) Engineer – L1/L2 Function Global Access Management (GAM), operating as a specialist function within the Service Desk Workstream Service Desk Reports To Service Desk Manager (day-to-day supervision via Shift Leads) Location India Delivery Centre (offshore) Work Model 24x7 rotational shift Employment Type Full time Minimum Experience 2–3 years in a Global Access Management / Identity & Access Management role 2. Role Purpose The Access Management Engineer is responsible for the accurate, timely and compliant fulfilment of identity and access requests across the client estate, operating as part of the Global Access Management function within the Service Desk. The role sits at the point where user experience and security control meet: every request must be delivered quickly enough to keep people productive, and correctly enough that no user ends up with access they are not entitled to. The engineer manages the day-to-day execution of the joiner, mover and leaver lifecycle, role and entitlement assignment, group and distribution list administration, privileged access provisioning, and access-related incident resolution. The role operates to defined SLAs, documented SOPs and approval workflows, and is accountable for the audit evidence that demonstrates each action was authorised before it was performed. 3. Key Responsibilities 3.1 Identity Lifecycle Management (Joiner / Mover / Leaver) Joiner provisioning – create and enable user accounts, mailboxes, group memberships and baseline entitlements within agreed SLA, ensuring new starters are productive from day one. Mover processing – action role, department and location changes, applying the entitlement set for the new role and, critically, removing entitlements attached to the previous one to prevent access accumulation. Leaver revocation – disable accounts, revoke access and process mailbox and data handover within the mandated timeframe, treating terminations and involuntary exits as priority actions. Reconcile lifecycle events against the HR feed and authoritative source system, and escalate discrepancies, orphaned accounts and unactioned leavers. 3.2 Access Request Fulfilment Manage the Access Management queue end to end: triage, validate, action, document and close requests within SLA. Verify authorisation before action – confirm that the correct approvals, entitlement owner sign-off and business justification are in place. Where they are not, the request is returned or held, not fulfilled. Administer role-based access (RBAC), security groups, distribution lists, shared mailboxes, folder and file-share permissions, and application-level entitlements. Provision, modify and revoke access across in-scope enterprise, retail and business applications in line with documented entitlement models. Handle bulk and project-driven access requests (onboarding waves, restructures, application migrations, store openings) with appropriate validation and staging. 3.3 Privileged & Elevated Access Process privileged and administrative access requests through the Privileged Access Management (PAM) toolset, applying least-privilege and time-bound access principles. Manage checkout, expiry and revocation of elevated entitlements, and ensure temporary access is withdrawn on schedule rather than left standing. Maintain and evidence the segregation-of-duties controls that apply to sensitive and toxic-combination entitlements. 3.4 Security, Compliance & Audit Perform every action in line with client security policy, information security standards and regulatory obligations, including privacy requirements. Support periodic user access reviews, recertification campaigns and entitlement attestations: ex

Skill Requirements

JOB DESCRIPTION Access Management Engineer Global Access Management (GAM) | Service Desk 1. Position Details Role Title Access Management Engineer Alternate Titles Access Management Analyst / Identity & Access Management (IAM) Engineer – L1/L2 Function Global Access Management (GAM), operating as a specialist function within the Service Desk Workstream Service Desk Reports To Service Desk Manager (day-to-day supervision via Shift Leads) Location India Delivery Centre (offshore) Work Model 24x7 rotational shift Employment Type Full time Minimum Experience 2–3 years in a Global Access Management / Identity & Access Management role 2. Role Purpose The Access Management Engineer is responsible for the accurate, timely and compliant fulfilment of identity and access requests across the client estate, operating as part of the Global Access Management function within the Service Desk. The role sits at the point where user experience and security control meet: every request must be delivered quickly enough to keep people productive, and correctly enough that no user ends up with access they are not entitled to. The engineer manages the day-to-day execution of the joiner, mover and leaver lifecycle, role and entitlement assignment, group and distribution list administration, privileged access provisioning, and access-related incident resolution. The role operates to defined SLAs, documented SOPs and approval workflows, and is accountable for the audit evidence that demonstrates each action was authorised before it was performed. 3. Key Responsibilities 3.1 Identity Lifecycle Management (Joiner / Mover / Leaver) Joiner provisioning – create and enable user accounts, mailboxes, group memberships and baseline entitlements within agreed SLA, ensuring new starters are productive from day one. Mover processing – action role, department and location changes, applying the entitlement set for the new role and, critically, removing entitlements attached to the previous one to prevent access accumulation. Leaver revocation – disable accounts, revoke access and process mailbox and data handover within the mandated timeframe, treating terminations and involuntary exits as priority actions. Reconcile lifecycle events against the HR feed and authoritative source system, and escalate discrepancies, orphaned accounts and unactioned leavers. 3.2 Access Request Fulfilment Manage the Access Management queue end to end: triage, validate, action, document and close requests within SLA. Verify authorisation before action – confirm that the correct approvals, entitlement owner sign-off and business justification are in place. Where they are not, the request is returned or held, not fulfilled. Administer role-based access (RBAC), security groups, distribution lists, shared mailboxes, folder and file-share permissions, and application-level entitlements. Provision, modify and revoke access across in-scope enterprise, retail and business applications in line with documented entitlement models. Handle bulk and project-driven access requests (onboarding waves, restructures, application migrations, store openings) with appropriate validation and staging. 3.3 Privileged & Elevated Access Process privileged and administrative access requests through the Privileged Access Management (PAM) toolset, applying least-privilege and time-bound access principles. Manage checkout, expiry and revocation of elevated entitlements, and ensure temporary access is withdrawn on schedule rather than left standing. Maintain and evidence the segregation-of-duties controls that apply to sensitive and toxic-combination entitlements. 3.4 Security, Compliance & Audit Perform every action in line with client security policy, information security standards and regulatory obligations, including privacy requirements. Support periodic user access reviews, recertification campaigns and entitlement attestations: ex

Other Requirements

JOB DESCRIPTION Access Management Engineer Global Access Management (GAM) | Service Desk 1. Position Details Role Title Access Management Engineer Alternate Titles Access Management Analyst / Identity & Access Management (IAM) Engineer – L1/L2 Function Global Access Management (GAM), operating as a specialist function within the Service Desk Workstream Service Desk Reports To Service Desk Manager (day-to-day supervision via Shift Leads) Location India Delivery Centre (offshore) Work Model 24x7 rotational shift Employment Type Full time Minimum Experience 2–3 years in a Global Access Management / Identity & Access Management role 2. Role Purpose The Access Management Engineer is responsible for the accurate, timely and compliant fulfilment of identity and access requests across the client estate, operating as part of the Global Access Management function within the Service Desk. The role sits at the point where user experience and security control meet: every request must be delivered quickly enough to keep people productive, and correctly enough that no user ends up with access they are not entitled to. The engineer manages the day-to-day execution of the joiner, mover and leaver lifecycle, role and entitlement assignment, group and distribution list administration, privileged access provisioning, and access-related incident resolution. The role operates to defined SLAs, documented SOPs and approval workflows, and is accountable for the audit evidence that demonstrates each action was authorised before it was performed. 3. Key Responsibilities 3.1 Identity Lifecycle Management (Joiner / Mover / Leaver) Joiner provisioning – create and enable user accounts, mailboxes, group memberships and baseline entitlements within agreed SLA, ensuring new starters are productive from day one. Mover processing – action role, department and location changes, applying the entitlement set for the new role and, critically, removing entitlements attached to the previous one to prevent access accumulation. Leaver revocation – disable accounts, revoke access and process mailbox and data handover within the mandated timeframe, treating terminations and involuntary exits as priority actions. Reconcile lifecycle events against the HR feed and authoritative source system, and escalate discrepancies, orphaned accounts and unactioned leavers. 3.2 Access Request Fulfilment Manage the Access Management queue end to end: triage, validate, action, document and close requests within SLA. Verify authorisation before action – confirm that the correct approvals, entitlement owner sign-off and business justification are in place. Where they are not, the request is returned or held, not fulfilled. Administer role-based access (RBAC), security groups, distribution lists, shared mailboxes, folder and file-share permissions, and application-level entitlements. Provision, modify and revoke access across in-scope enterprise, retail and business applications in line with documented entitlement models. Handle bulk and project-driven access requests (onboarding waves, restructures, application migrations, store openings) with appropriate validation and staging. 3.3 Privileged & Elevated Access Process privileged and administrative access requests through the Privileged Access Management (PAM) toolset, applying least-privilege and time-bound access principles. Manage checkout, expiry and revocation of elevated entitlements, and ensure temporary access is withdrawn on schedule rather than left standing. Maintain and evidence the segregation-of-duties controls that apply to sensitive and toxic-combination entitlements. 3.4 Security, Compliance & Audit Perform every action in line with client security policy, information security standards and regulatory obligations, including privacy requirements. Support periodic user access reviews, recertification campaigns and entitlement attestations: ex