Delivery Lead – Access Management
Job Type: Permanent
Hours: 40 per week – full time
Do you have expertise in Identity and Access Management delivery? This is an exciting role for you – Delivery Lead – Access Management!
TCS is a purpose‑led transformation company, built on belief. We support businesses to make an impact that matters, through challenging projects that demand ambitious innovation and thought leadership. This role enables you to make a difference.
* Build strong relationships with a diverse range of stakeholders.
* Gain access to endless learning opportunities.
* Work closely with the range of teams within the business to bring products to life.
The Role
As a Delivery Lead – Access Management, you will be responsible for the day‑to‑day delivery, stability, and operational governance of Identity and Access Management (IAM) and Public Key Infrastructure (PKI) services across the enterprise. You will ensure secure, reliable, and compliant access management services aligned to defined SLAs and security standards. You will work with service desks, application owners, infrastructure teams, security stakeholders, and customer Access Management teams to ensure timely access delivery, effective issue resolution, and minimal service disruption while supporting a cloud‑first and Zero Trust operating model.
Key responsibilities
* Act as the primary operational point of contact for IAM and PKI service delivery within the customer delivery tower.
* Lead and assure operational adoption of cloud‑first and Zero Trust principles, including certificate‑based identity and trust models.
* Oversee delivery of core IAM capabilities across authentication, access provisioning, lifecycle management, and governance.
* Manage Joiner, Mover, Leaver (JML) processes, role‑based access control, and access request and approval workflows.
* Lead operational delivery of Privileged Access Management (PAM) services and access certification activities.
* Own and manage PKI and digital certificate services, including certificate issuance, renewal, rotation, revocation, and lifecycle monitoring.
* Ensure PKI services comply with cryptographic standards, security policies, and audit requirements.
* Collaborate with SOC, Cloud, Network, Application, and Platform teams to resolve IAM and PKI incidents and service issues.
* Lead IAM and PKI service requests, incidents, and changes in line with ITIL processes and agreed SLAs.
* Create and maintain IAM and PKI operational documentation, including SOPs, runbooks, and support models.
* Develop and maintain IAM and PKI policies, standards, and control procedures aligned to organisational governance.
* Guide and manage IAM and PKI BAU teams working across Entra ID, SailPoint, and digital certificate lifecycle management tools (onshore/offshore).
Your Profile
Essential skills/knowledge/experience
* Strong experience providing IAM and PKI operational leadership, assurance, and hands‑on delivery across enterprise and cloud environments.
* Proven customer‑centric mindset, ensuring identity, access, and certificate services meet business, regulatory, and security requirements.
* Ability to act as an operational SME and escalation point for IAM and PKI services within a security function.
* Solid technical expertise across Microsoft identity and certificate platforms, including Azure AD / Entra ID, Active Directory Certificate Services, Azure Key Vault, GlobalSign, and SailPoint.
* Practical experience implementing cloud‑first and Zero Trust principles, including certificate‑based authentication and device trust models.
* Strong capability in identifying IAM and PKI risks, control gaps, and certificate lifecycle issues, with implementation of mitigating controls.
* Hands‑on experience with authentication services such as SSO, MFA, certificate‑based authentication, and enterprise application integrations.
* High attention to detail across access provisioning, certificate issuance, renewal, rotation, and revocation processes.
* Clear communicator, able to translate IAM and PKI concepts into business‑appropriate language.
* Good working knowledge of ITIL service management processes (Incident, Change, Request, Problem).
* Awareness of governance frameworks and standards such as ISO/IEC 27001, NIST, COBIT, and ITIL.
* Understanding of regulatory and compliance requirements impacting IAM and PKI (e.g. GDPR, PCI‑DSS, PII).
* Relevant cloud, identity, or security certifications such as AZ‑900 (Microsoft Azure Fundamentals) or SC‑300 (Microsoft Identity and Access Administrator).
* Advanced security or architecture certifications including SC‑100 (Cybersecurity Architect) or AZ‑500 (Azure Security Engineer).
* Identity governance platform certification such as SailPoint Identity Security Leader.
* Broad cybersecurity certification such as CISSP, demonstrating enterprise‑wide security knowledge.
* Experience supporting mature IAM and PKI operating models within large or regulated organisations.
TCS is consistently voted a Top Employer in the UK and globally. Competitive salary packages feature pension, health care, life assurance, laptop, phone, access to extensive training resources and discounts within the larger Tata network.
Diversity, Inclusion and Wellbeing
Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the UK Equality Act 2010 and the UK Human Rights Act 1998. We believe in building and sustaining a culture of equity and belonging where everyone can thrive. Our diversity and inclusion motto is ‘Inclusion without Exception’. Our continued commitment to Culture and Diversity is reflected across our workforce implemented through equitable workplace policies and processes.
We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role.
Join us and do more of what matters.
#J-18808-Ljbffr