Description
GSK is seeking a Principal, IAM Lifecycle Management to drive the design, engineering, and delivery of enterprise identity and account lifecycle capabilities.
The successful candidate will act as the senior technical authority for the capability, translating business, security, architecture, and regulatory requirements into scalable lifecycle controls, automation, and integrations across cloud, on-premises, and SaaS environments.
Key responsibilities:
- Own complex IAM lifecycle workstreams from discovery and requirements analysis through solution design, configuration, testing, deployment, and operational transition.
- Act as the senior technical subject matter expert for IAM Lifecycle Management, advising product, architecture, engineering, security, risk, audit, and business stakeholders.
- Mentor engineers, review solution designs and code, and establish reusable patterns, standards, documentation, and engineering practices.
- Design and deliver end-to-end identity and account lifecycle capabilities, including creation, provisioning, modification, suspension, recertification, and deprovisioning across on-premises, cloud, and SaaS systems.
- Drive joiner, mover, leaver, rehire, contractor, partner, and non-human identity lifecycle scenarios, including trigger events, approval orchestration, account states, exception handling, and recovery controls.
- Implement and improve governance controls for least privilege, segregation of duties, birthright and role-based access, account ownership, orphan-account prevention, access reviews, and policy compliance.
Basic Qualifications:
- Bachelor’s degree in Computer Science, Information Technology, or a related discipline.
- Ten or more years of relevant IAM experience, including significant hands-on engineering and technical ownership of complex identity and account lifecycle implementations.
- Strong implementation experience with an enterprise Identity Governance and Administration platform.
- Proven experience designing and delivering lifecycle solutions for various identity scenarios.
Preferred Qualifications:
- Advanced implementation experience with a SaaS-based identity security or leading IGA platform.
- Experience modernising or migrating legacy or bespoke lifecycle solutions to a SaaS IGA platform.
- Experience designing serverless, containerised, or event-driven integration services in Microsoft Azure.
Typical tools and technologies: SailPoint, Saviynt, LINX, Active Directory, Microsoft Entra ID, LDAP, HR source systems, Next.js, NestJS, Apollo GraphQL, TypeScript, Node.js, .NET, REST and SOAP APIs, Microsoft Graph, JSON, SQL, Azure integration services, GitHub, and Azure DevOps.