Specialist - Identity & Access Management (MS Entra-ID & PAM)

Responsibilities

• Engineer, administer, and govern enterprise identity and privileged access services using Saviynt CPAM and Microsoft Entra-ID.
• Manage day-to-day administration and optimization of Saviynt CPAM, including request workflows, role models, and entitlement structures.
• Design and implement access governance controls aligned with Zero Trust principles, including Just-In-Time (JIT) and privileged role management.
• Administer Microsoft Entra ID services, including enterprise applications, app registrations, and hybrid identity configurations.
• Implement secure authentication and federation capabilities using SAML, OAuth, and OpenID Connect.
• Drive automation opportunities using PowerShell, KQL, and Microsoft Graph API to improve provisioning and control effectiveness.
• Provide L3 technical support and guidance for Saviynt CPAM and Microsoft Entra-ID incidents and service requests.

Requirements

• 7 to 8 years of total experience in IT, with at least 4 years specifically in Identity and Access Management (IAM).
• Deep hands-on expertise in Saviynt CPAM capabilities and workflow management.
• Strong technical knowledge of Microsoft Entra ID (formerly Azure AD) and hybrid Active Directory environments.
• Proficiency in PowerShell, KQL, REST APIs, and JSON.
• Solid understanding of authentication standards including SAML, OAuth, and OpenID Connect.
• Bachelor's degree in Computer Science, Information Security, Engineering, or a related technical discipline.

Preferred Qualifications

• Relevant certifications such as SC-300: Microsoft Identity and Access Administrator.
• Saviynt product certifications.
• Knowledge of ITIL frameworks.

About the Company

Diageo is the world’s leading premium drinks company, with a portfolio of over 200 iconic brands including Johnnie Walker, Guinness, and Tanqueray. We operate in nearly 180 countries, driven by a passion for innovation and a commitment to celebrating life, every day, everywhere.