User Identity & Access (IAM)

About the Role

The User Identity & Access (IAM) is responsible for managing and supporting identity and access services to ensure secure, reliable, and efficient user access across Minor Group systems. This role focuses on operational IAM activities including user lifecycle management, access provisioning, and identity governance, and works closely with Service Desk, Onsite Support, Infrastructure Operations, Security, and Application Owners.

Responsibilities

• Manage user lifecycle processes (joiner, mover, leaver): account creation, modification, and deactivation across systems.
• Handle access requests and ensure appropriate access is granted based on role, policy, and approval workflows.
• Maintain and manage group-based access control and role-based access (RBAC).
• Support and manage Local Active Directory, Microsoft Entra ID (Azure AD), Exchange (Online/Hybrid), and related system integrations.
• Support and troubleshoot IAM-related issues including login failures, SSO errors, MFA problems, mail access issues, and directory synchronization problems.
• Ensure identity governance, including conditional access, MFA enforcement, least privilege, and segregation of duties (SoD).
• Conduct periodic access reviews with system and application owners.
• Develop and maintain SOPs, runbooks, and knowledge base articles for L1/L2 support teams.
• Automate IAM processes (provisioning, access requests, reporting) using scripting or workflow tools.
• Coordinate with vendors or managed service providers to ensure IAM service delivery and SLA adherence.
• Support audit and compliance activities by providing IAM-related data, reports, and evidence.
• Continuously improve IAM processes to enhance efficiency, security, and user experience.
• Manage and govern license assignments for Microsoft services, cloud platforms, and enterprise applications to ensure cost optimization and compliance.

Qualifications

• Bachelor’s degree in Computer Science, Information Technology, or a related field.
• Minimum 3–5 years of experience in IAM, IT Operations, or related roles.
• Hands-on experience with Microsoft identity platforms (Entra ID / Azure AD) and Active Directory environments.
• Experience with Exchange (Online/Hybrid) and integration with enterprise systems.
• Understanding of authentication and SSO technologies (SAML, OAuth).
• Familiarity with IT service management principles and ITIL (incident, request, change management).
• Experience with scripting or automation tools (e.g., PowerShell, Python, Power Automate) to improve operational efficiency.
• Skilled in creating technical documentation, SOPs, and operational runbooks.
• Experience working within L1/L2/L3 support models and collaborating with Service Desk and O365 teams.
• Ability to coordinate with vendors or managed service providers is an advantage; certifications related to IAM, Microsoft, or ITIL are a plus.
• Strong proficiency in both Thai and English, written and spoken.

Skills

• Identity lifecycle management, RBAC, conditional access, and MFA enforcement.
• Active Directory and Microsoft Entra ID / Azure AD administration.
• SSO (SAML/OAuth) troubleshooting and integration.
• Scripting and automation for provisioning and reporting (PowerShell, Python, workflow tools).
• ITIL-based service management and operational runbooks/SOPs.
• Audit and compliance support for identity governance.