ASAI job platform logo
  1. Home
  2. /Jobs
  3. /Subject Matter Expert (Support&Ops)
HC
HCLTech

Subject Matter Expert (Support&Ops)

Gautam Buddha Nagar · Entry Level

Older listing - lower visibility likelyVerified listingPosted 31d ago

Applicants who checked fit first are 3.1× more likely to hear back

Your match scoreFree · sign in
86Overall
64Skills
97Experience

Your score for this role already exists

ASAI compared this JD against 41 signals - skills, seniority, domain, stack overlap etc. Add a resume and it unlocks in about 30 seconds.

Always free · no credit card · 1 tap with Google

What we know about this role

Hiring pulse

HIGH

Our tracked job listings for HCLTech show strong recent activity.

Apply window

First 72 hours

Window passed - posted 31d ago

Early applicants get seen before the pile builds.

Not a repost

The first time we've seen this listing - it hasn't been closed and reopened.

Skills required

7 listed
Service DeskUser AccountsShare PermissionsAWS Identity And Access Management (IAM)Role-Based Access Control (RBAC)Pluggable Authentication Module (PAM)Request.form
Service DeskUser AccountsShare PermissionsAWS Identity And Access Management (IAM)Role-Based Access Control (RBAC)

You almost certainly match several of these already. Unlock your skill map to see the matches, the gaps, and what to fix first.

Job description

Job Summary

JOB DESCRIPTION Access Management Engineer Global Access Management (GAM) | Service Desk 1. Position Details Role Title Access Management Engineer Alternate Titles Access Management Analyst / Identity & Access Management (IAM) Engineer – L1/L2 Function Global Access Management (GAM), operating as a specialist function within the Service Desk Workstream Service Desk Reports To Service Desk Manager (day-to-day supervision via Shift Leads) Location India Delivery Centre (offshore) Work Model 24x7 rotational shift Employment Type Full time Minimum Experience 2–3 years in a Global Access Management / Identity & Access Management role 2. Role Purpose The Access Management Engineer is responsible for the accurate, timely and compliant fulfilment of identity and access requests across the client estate, operating as part of the Global Access Management function within the Service Desk. The role sits at the point where user experience and security control meet: every request must be delivered quickly enough to keep people productive, and correctly enough that no user ends up with access they are not entitled to. The engineer manages the day-to-day execution of the joiner, mover and leaver lifecycle, role and entitlement assignment, group and distribution list administration, privileged access provisioning, and access-related incident resolution. The role operates to defined SLAs, documented SOPs and approval workflows, and is accountable for the audit evidence that demonstrates each action was authorised before it was performed. 3. Key Responsibilities 3.1 Identity Lifecycle Management (Joiner / Mover / Leaver) Joiner provisioning – create and enable user accounts, mailboxes, group memberships and baseline entitlements within agreed SLA, ensuring new starters are productive from day one. Mover processing – action role, department and location changes, applying the entitlement set for the new role and, critically, removing entitlements attached to the previous one to prevent access accumulation. Leaver revocation – disable accounts, revoke access and process mailbox and data handover within the mandated timeframe, treating terminations and involuntary exits as priority actions. Reconcile lifecycle events against the HR feed and authoritative source system, and escalate discrepancies, orphaned accounts and unactioned leavers. 3.2 Access Request Fulfilment Manage the Access Management queue end to end: triage, validate, action, document and close requests within SLA. Verify authorisation before action – confirm that the correct approvals, entitlement owner sign-off and business justification are in place. Where they are not, the request is returned or held, not fulfilled. Administer role-based access (RBAC), security groups, distribution lists, shared mailboxes, folder and file-share permissions, and application-level entitlements. Provision, modify and revoke access across in-scope enterprise, retail and business applications in line with documented entitlement models. Handle bulk and project-driven access requests (onboarding waves, restructures, application migrations, store openings) with appropriate validation and staging. 3.3 Privileged & Elevated Access Process privileged and administrative access requests through the Privileged Access Management (PAM) toolset, applying least-privilege and time-bound access principles. Manage checkout, expiry and revocation of elevated entitlements, and ensure temporary access is withdrawn on schedule rather than left standing. Maintain and evidence the segregation-of-duties controls that apply to sensitive and toxic-combination entitlements. 3.4 Security, Compliance & Audit Perform every action in line with client security policy, information security standards and regulatory obligations, including privacy requirements. Support periodic user access reviews, recertification campaigns and entitlement attestations: ex

Key Responsibilities

JOB DESCRIPTION Access Management Engineer Global Access Management (GAM) | Service Desk 1. Position Details Role Title Access Management Engineer Alternate Titles Access Management Analyst / Identity & Access Management (IAM) Engineer – L1/L2 Function Global Access Management (GAM), operating as a specialist function within the Service Desk Workstream Service Desk Reports To Service Desk Manager (day-to-day supervision via Shift Leads) Location India Delivery Centre (offshore) Work Model 24x7 rotational shift Employment Type Full time Minimum Experience 2–3 years in a Global Access Management / Identity & Access Management role 2. Role Purpose The Access Management Engineer is responsible for the accurate, timely and compliant fulfilment of identity and access requests across the client estate, operating as part of the Global Access Management function within the Service Desk. The role sits at the point where user experience and security control meet: every request must be delivered quickly enough to keep people productive, and correctly enough that no user ends up with access they are not entitled to. The engineer manages the day-to-day execution of the joiner, mover and leaver lifecycle, role and entitlement assignment, group and distribution list administration, privileged access provisioning, and access-related incident resolution. The role operates to defined SLAs, documented SOPs and approval workflows, and is accountable for the audit evidence that demonstrates each action was authorised before it was performed. 3. Key Responsibilities 3.1 Identity Lifecycle Management (Joiner / Mover / Leaver) Joiner provisioning – create and enable user accounts, mailboxes, group memberships and baseline entitlements within agreed SLA, ensuring new starters are productive from day one. Mover processing – action role, department and location changes, applying the entitlement set for the new role and, critically, removing entitlements attached to the previous one to prevent access accumulation. Leaver revocation – disable accounts, revoke access and process mailbox and data handover within the mandated timeframe, treating terminations and involuntary exits as priority actions. Reconcile lifecycle events against the HR feed and authoritative source system, and escalate discrepancies, orphaned accounts and unactioned leavers. 3.2 Access Request Fulfilment Manage the Access Management queue end to end: triage, validate, action, document and close requests within SLA. Verify authorisation before action – confirm that the correct approvals, entitlement owner sign-off and business justification are in place. Where they are not, the request is returned or held, not fulfilled. Administer role-based access (RBAC), security groups, distribution lists, shared mailboxes, folder and file-share permissions, and application-level entitlements. Provision, modify and revoke access across in-scope enterprise, retail and business applications in line with documented entitlement models. Handle bulk and project-driven access requests (onboarding waves, restructures, application migrations, store openings) with appropriate validation and staging. 3.3 Privileged & Elevated Access Process privileged and administrative access requests through the Privileged Access Management (PAM) toolset, applying least-privilege and time-bound access principles. Manage checkout, expiry and revocation of elevated entitlements, and ensure temporary access is withdrawn on schedule rather than left standing. Maintain and evidence the segregation-of-duties controls that apply to sensitive and toxic-combination entitlements. 3.4 Security, Compliance & Audit Perform every action in line with client security policy, information security standards and regulatory obligations, including privacy requirements. Support periodic user access reviews, recertification campaigns and entitlement attestations: ex

Skill Requirements

JOB DESCRIPTION Access Management Engineer Global Access Management (GAM) | Service Desk 1. Position Details Role Title Access Management Engineer Alternate Titles Access Management Analyst / Identity & Access Management (IAM) Engineer – L1/L2 Function Global Access Management (GAM), operating as a specialist function within the Service Desk Workstream Service Desk Reports To Service Desk Manager (day-to-day supervision via Shift Leads) Location India Delivery Centre (offshore) Work Model 24x7 rotational shift Employment Type Full time Minimum Experience 2–3 years in a Global Access Management / Identity & Access Management role 2. Role Purpose The Access Management Engineer is responsible for the accurate, timely and compliant fulfilment of identity and access requests across the client estate, operating as part of the Global Access Management function within the Service Desk. The role sits at the point where user experience and security control meet: every request must be delivered quickly enough to keep people productive, and correctly enough that no user ends up with access they are not entitled to. The engineer manages the day-to-day execution of the joiner, mover and leaver lifecycle, role and entitlement assignment, group and distribution list administration, privileged access provisioning, and access-related incident resolution. The role operates to defined SLAs, documented SOPs and approval workflows, and is accountable for the audit evidence that demonstrates each action was authorised before it was performed. 3. Key Responsibilities 3.1 Identity Lifecycle Management (Joiner / Mover / Leaver) Joiner provisioning – create and enable user accounts, mailboxes, group memberships and baseline entitlements within agreed SLA, ensuring new starters are productive from day one. Mover processing – action role, department and location changes, applying the entitlement set for the new role and, critically, removing entitlements attached to the previous one to prevent access accumulation. Leaver revocation – disable accounts, revoke access and process mailbox and data handover within the mandated timeframe, treating terminations and involuntary exits as priority actions. Reconcile lifecycle events against the HR feed and authoritative source system, and escalate discrepancies, orphaned accounts and unactioned leavers. 3.2 Access Request Fulfilment Manage the Access Management queue end to end: triage, validate, action, document and close requests within SLA. Verify authorisation before action – confirm that the correct approvals, entitlement owner sign-off and business justification are in place. Where they are not, the request is returned or held, not fulfilled. Administer role-based access (RBAC), security groups, distribution lists, shared mailboxes, folder and file-share permissions, and application-level entitlements. Provision, modify and revoke access across in-scope enterprise, retail and business applications in line with documented entitlement models. Handle bulk and project-driven access requests (onboarding waves, restructures, application migrations, store openings) with appropriate validation and staging. 3.3 Privileged & Elevated Access Process privileged and administrative access requests through the Privileged Access Management (PAM) toolset, applying least-privilege and time-bound access principles. Manage checkout, expiry and revocation of elevated entitlements, and ensure temporary access is withdrawn on schedule rather than left standing. Maintain and evidence the segregation-of-duties controls that apply to sensitive and toxic-combination entitlements. 3.4 Security, Compliance & Audit Perform every action in line with client security policy, information security standards and regulatory obligations, including privacy requirements. Support periodic user access reviews, recertification campaigns and entitlement attestations: ex

Other Requirements

JOB DESCRIPTION Access Management Engineer Global Access Management (GAM) | Service Desk 1. Position Details Role Title Access Management Engineer Alternate Titles Access Management Analyst / Identity & Access Management (IAM) Engineer – L1/L2 Function Global Access Management (GAM), operating as a specialist function within the Service Desk Workstream Service Desk Reports To Service Desk Manager (day-to-day supervision via Shift Leads) Location India Delivery Centre (offshore) Work Model 24x7 rotational shift Employment Type Full time Minimum Experience 2–3 years in a Global Access Management / Identity & Access Management role 2. Role Purpose The Access Management Engineer is responsible for the accurate, timely and compliant fulfilment of identity and access requests across the client estate, operating as part of the Global Access Management function within the Service Desk. The role sits at the point where user experience and security control meet: every request must be delivered quickly enough to keep people productive, and correctly enough that no user ends up with access they are not entitled to. The engineer manages the day-to-day execution of the joiner, mover and leaver lifecycle, role and entitlement assignment, group and distribution list administration, privileged access provisioning, and access-related incident resolution. The role operates to defined SLAs, documented SOPs and approval workflows, and is accountable for the audit evidence that demonstrates each action was authorised before it was performed. 3. Key Responsibilities 3.1 Identity Lifecycle Management (Joiner / Mover / Leaver) Joiner provisioning – create and enable user accounts, mailboxes, group memberships and baseline entitlements within agreed SLA, ensuring new starters are productive from day one. Mover processing – action role, department and location changes, applying the entitlement set for the new role and, critically, removing entitlements attached to the previous one to prevent access accumulation. Leaver revocation – disable accounts, revoke access and process mailbox and data handover within the mandated timeframe, treating terminations and involuntary exits as priority actions. Reconcile lifecycle events against the HR feed and authoritative source system, and escalate discrepancies, orphaned accounts and unactioned leavers. 3.2 Access Request Fulfilment Manage the Access Management queue end to end: triage, validate, action, document and close requests within SLA. Verify authorisation before action – confirm that the correct approvals, entitlement owner sign-off and business justification are in place. Where they are not, the request is returned or held, not fulfilled. Administer role-based access (RBAC), security groups, distribution lists, shared mailboxes, folder and file-share permissions, and application-level entitlements. Provision, modify and revoke access across in-scope enterprise, retail and business applications in line with documented entitlement models. Handle bulk and project-driven access requests (onboarding waves, restructures, application migrations, store openings) with appropriate validation and staging. 3.3 Privileged & Elevated Access Process privileged and administrative access requests through the Privileged Access Management (PAM) toolset, applying least-privilege and time-bound access principles. Manage checkout, expiry and revocation of elevated entitlements, and ensure temporary access is withdrawn on schedule rather than left standing. Maintain and evidence the segregation-of-duties controls that apply to sensitive and toxic-combination entitlements. 3.4 Security, Compliance & Audit Perform every action in line with client security policy, information security standards and regulatory obligations, including privacy requirements. Support periodic user access reviews, recertification campaigns and entitlement attestations: ex

Tools to land this role

Premium

Your match score, skill map and tracker stay free.

Ground Reality

Premium
Spot the dealbreakers in this 2132-word post before you apply

Skip jobs with hidden dealbreakers. See what they actually need, what's easy to miss, and how they describe the team.

Ground Reality on every job, plus Insider Path, practice interviews and resume tailoring.

Insider Path

Premium
Find someone who can refer you here

We help you find people there who worked or studied where you did, and draft your first message and follow-up.

Free · no signup

Get tomorrow's jobs before you have to search

Daily job drops, skill trends and free resources - posted straight to the group. Leave any time.

Join WhatsAppJoin Telegram

No spam. Just jobs and resources.

Why people use ASAI

Someone shared one job with you. ASAI keeps finding the rest.

  • Scored, not searched. Every role ranked against your actual profile.

  • Alerts as often as hourly. Reach new roles while the pile is still small.

  • Skill gaps, spelled out. See exactly which requirements you don't meet yet.

  • Verified jobs, only. Say no to ghost jobs. Your time deserves respect.

Keep browsing

All open roles at HCLTech

Two ways in

Applicants who checked fit first are 3.1× more likely to hear back

Your match scoreFree · sign in
86Overall
64Skills
97Experience

Your score for this role already exists

ASAI compared this JD against 41 signals - skills, seniority, domain, stack overlap etc. Add a resume and it unlocks in about 30 seconds.

Always free · no credit card · 1 tap with Google

Free · no signup

Get tomorrow's jobs before you have to search

Daily job drops, skill trends and free resources - posted straight to the group. Leave any time.

Join WhatsAppJoin Telegram

No spam. Just jobs and resources.

Why people use ASAI

Someone shared one job with you. ASAI keeps finding the rest.

  • Scored, not searched. Every role ranked against your actual profile.

  • Alerts as often as hourly. Reach new roles while the pile is still small.

  • Skill gaps, spelled out. See exactly which requirements you don't meet yet.

  • Verified jobs, only. Say no to ghost jobs. Your time deserves respect.

ASAI job platform logo

A job platform finally, balanced in your favour.

Jobs by CityJobs by CompanyGuidesPricingHow We VerifyAboutPrivacy PolicyTerms of ServiceDaily jobs on WhatsApp

Built in India 🇮🇳

© 2026 ASAI. All rights reserved.