User Identity & Access (IAM)

About the Role

The User Identity & Access (IAM) is responsible for managing and supporting identity and access services to ensure secure, reliable, and efficient user access across Minor Group systems. This role focuses on operational IAM activities, including user lifecycle management, access provisioning, and identity governance, and works with cross-functional teams to align IAM with organizational standards and security policies.

Responsibilities

• Manage user lifecycle processes (joiner, mover, leaver) including account creation, modification, and deactivation across systems.
• Handle access requests and ensure appropriate access is granted based on role, policy, and approval workflow.
• Maintain and manage group-based access control and Role-Based Access Control (RBAC).
• Support and manage Local Active Directory (AD), Microsoft Entra ID (Azure AD), Exchange (Online/Hybrid), and related system integrations.
• Support and troubleshoot IAM-related issues, including login failures, SSO errors, MFA issues, mail access issues, and directory synchronization problems.
• Ensure identity governance, including conditional access, MFA enforcement, least privilege and segregation of duties (SoD) compliance.
• Conduct periodic access reviews with system/application owners.
• Develop and maintain SOPs, runbooks, and knowledge base articles for L1/L2 support teams.
• Automate IAM processes (provisioning, access requests, reporting) using scripting or workflow tools.
• Coordinate with vendors or managed service providers to ensure IAM service delivery and support SLAs.
• Support audit and compliance activities by providing IAM-related data, reports, and evidence.
• Manage and govern license assignments for Microsoft services, cloud platforms, and enterprise applications for cost optimization and compliance.

Skills / Required Skills

• Identity and access management concepts: user lifecycle management, RBAC, identity governance.
• Hands-on experience with Local AD, Microsoft Entra ID (Azure AD), and Exchange (Online/Hybrid).
• Understanding of authentication and SSO technologies (SAML, OAuth).
• Experience with scripting or automation tools (e.g., PowerShell, Python, Power Automate) for provisioning and reporting.
• Familiarity with IT service management principles (incident, request, change management under ITIL).
• Troubleshooting IAM technical issues and maintaining runbooks/SOPs.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum 3–5 years of experience in IAM, IT Operations, or related roles with enterprise identity lifecycle and access provisioning experience.
• Hands-on experience with Microsoft identity platforms (Entra ID / Azure AD) and Active Directory environments.
• Understanding of enterprise IT environments, including integration with applications, cloud, and infrastructure systems.
• Experience working within L1/L2/L3 support models and collaborating with Service Desk and O365 teams.
• Ability to coordinate with vendors or managed service providers is an advantage; related certifications (IAM, Microsoft, ITIL) are a plus.
• Strong troubleshooting, analytical, and problem-solving skills.
• Strong proficiency in both Thai and English, both written and spoken.

Additional Information

• Work arrangement: onsite
• Employment type: full-time