Job Summary

Identity and Access Management (IAM) Team is a core pillar in Tetra Pak's security domain, providing in-house support across areas including PAM, Secret Management, IGA, Certificate Services, SAP Identity Services, Active Directory, Entra ID, and more. We are seeking an IAM Consultant to join our dynamic team and contribute to ensuring the quality, reliability, and security of identity services through engineering, support, design, configuration, troubleshooting, automation, and reporting capabilities. 

The ideal candidate will be hands-on, well organized, risk and compliance focused, self-driven, and capable of working effectively in a fast-paced and highly technical environment. This role requires strong prioritization skills, responsiveness, and excellent communication and collaboration abilities. 

What you will do

• Provide vision for identity and access provisioning services, enabling innovation and continuous improvements that strengthen the organization's security posture.
• Support and engineer IAM solutions across areas such as Active Directory, Entra ID, PAM, IGA, Certificate Services, SAP Identity Services, and related technologies.
• Develop and execute design configurations, support requests, troubleshooting activities, and IAM-related operational tasks.
• Drive automation and integration of access provisioning infrastructure with other systems to enable straight-through processing and reduce manual effort.
• Analyze identity anomalies, security gaps, and opportunities for process optimization within IAM systems.
• Drive innovation and evaluate emerging IAM technologies, industry standards, and best practices for potential adoption.
• Execute support and design configuration requests from project teams and ensure timely delivery aligned to project milestones.
• Collaborate with cross-functional teams and represent the IAM function in meetings, discussions, and project activities.
• Support reporting, visibility, control, and data analytics requirements across IAM operations.
• Promote identity protection, security-first thinking, and IAM governance best practices.
• Stay hyperaware of IAM industry trends and continuously identify opportunities to improve effectiveness and service delivery.

We believe you have

• Bachelor’s degree in computer science, Engineering, or an equivalent field.
• Proven experience as an IAM Consultant or in a similar Identity and Access Management role.
• Strong knowledge of IAM technologies including Active Directory, Entra ID, MFA, Conditional Access Policies, Access & Entitlement Management, Identity Protection & Governance, IGA, PAM, and Customer Identity & Access Management (CIAM).
• Experience with Single Sign-On (SSO) solutions such as Ping Identity, Entra ID, or similar platforms.
• Knowledge of certificate management (PKI) and identity-related security controls.
• Knowledge of SAP IAS/IPS is an added advantage.
• Experience or exposure to automation and scripting using PowerShell, Python, or Ansible.
• Knowledge of API integration platforms such as APIGEE or similar solutions is an advantage.
• Familiarity with version control systems such as Git and CI/CD pipelines.
• Familiarity with containerization technologies such as Docker and Kubernetes.
• Strong analytical and problem-solving skills with attention to detail.
• Excellent communication and collaboration skills with the ability to work effectively in a team environment.
• Relevant certifications such as Microsoft Certified IAM Administrator, Certified Omada Engineer, or equivalent are preferred.