Job Purpose:
The User Identity & Access (IAM) is responsible for managing and supporting identity and access services to ensure secure, reliable, and efficient user access across Minor Group systems.
This role focuses on operational IAM activities, including user lifecycle management, access provisioning, and identity governance. The position plays a key role in ensuring compliance with security policies while improving operational efficiency through automation and standardized processes.
The role works closely with cross-functional teams such as Service Desk, Onsite Support, Infrastructure Operations, Security, and Application Owners to ensure seamless identity and access management aligned with organizational standards and security policies.
Category/Area of Responsibility
- Manage user lifecycle processes (joiner, mover, leaver), including account creation, modification, and deactivation across systems.
- Handle access requests and ensure appropriate access is granted based on role, policy, and approval workflow.
- Maintain and manage group-based access control and role-based access (RBAC).
- Support and manage Local Active Directory (AD), Microsoft Entra ID (Azure AD), Exchange (Online/Hybrid), and related system integrations.
- Support and troubleshoot IAM-related issues, including login failures, SSO errors, MFA issues, mail access issues, and directory synchronization problems.
- Ensure identity governance, including conditional access, MFA enforcement, and compliance with security policies (least privilege, SoD).
- Conduct periodic access reviews with system/application owners.
- Develop and maintain SOPs, runbooks, and knowledge base articles for L1/L2 support teams.
- Automate IAM processes (provisioning, access requests, reporting) using scripting or workflow tools.
- Coordinate with vendors or managed service providers (if applicable) to ensure IAM service delivery and support SLAs.
- Support audit and compliance activities by providing IAM-related data, reports, and evidence.
- Continuously improve IAM processes to enhance efficiency, security, and user experience.
- Manage and govern license assignments for Microsoft services, cloud platforms, and enterprise applications, ensuring cost optimization, compliance, and effective utilization.
Job Specifications: Knowledge, Skills & Abilities
- Strong knowledge of identity and access management concepts, including:
- User lifecycle management
- Role-Based Access Control (RBAC)
- Identity governance
- Hands-on experience with Local AD, Microsoft Entra ID (Azure AD), and Exchange (Online/Hybrid), including integration with enterprise systems.
- Understanding of authentication and SSO technologies (SAML, OAuth).
- Familiarity with IT service management principles, particularly incident, request, and change management under ITIL framework.
- Ability to troubleshoot IAM-related technical issues and provide effective resolution.
- Experience with scripting or automation tools (e.g., PowerShell, Python, Power Automate) to improve operational efficiency.
- Skilled in creating technical documentation, SOPs, and operational runbooks.
- Good understanding of security principles related to identity management and access control.
- Strong communication and coordination skills with cross-functional teams.
- Proactive mindset with the ability to identify and improve operational processes.
Qualification
- Bachelor's degree in Computer Science, Information Technology, or a related field.
- Minimum of 3–5 years of experience in IAM, IT Operations, or related roles.
- Experience in identity lifecycle management and access provisioning in enterprise environments.
- Hands-on experience with Microsoft identity platforms (Entra ID / Azure AD) and Active Directory environments.
- Understanding of enterprise IT environments, including integration with applications, cloud, and infrastructure systems.
- Familiarity with IT service management frameworks (ITIL).
- Strong troubleshooting, analytical, and problem-solving skills.
- Experience working within L1/L2/L3 support models and collaborating with Service Desk, O365 teams.
- Ability to coordinate with vendors or managed service providers is an advantage.
- Certifications related to IAM, Microsoft, or ITIL are a plus.
- Strong proficiency in both Thai and English, both written and spoken.
