Instructor - IDAM

Key Responsibilities
Plan, design and deliver IDAM training sessions with hands-on labs and assessments
Teach directory architecture and configuration, including identity stores and directory services (Active Directory, LDAP/OpenLDAP and Microsoft Entra ID), group lifecycle and directory policy management
Cover identity lifecycle operations, including user lifecycle management, joiner-mover-leaver processes, identity provisioning and deprovisioning, access requests, entitlement management and service-account lifecycle management
Teach Identity Governance & Administration (IGA) operations and compliance, including access reviews and recertification, identity certification, SoD rules and access governance, identity audits, entitlement and role lifecycle management, and compliance reporting
Train learners on Access Management, including SSO, CIAM, and authentication and MFA
Cover identity federation and cross-domain authentication using SAML, OAuth 2.0 and OpenID Connect (OIDC), including integration between cloud and on-premises identities
Demonstrate advanced authentication, including password-based, biometric and certificate-based authentication, step-up authentication and password rotation controls
Teach advanced access control, including DAC, MAC, RBAC, ABAC, risk-based and policy-based access control, enforcement of least privilege, and the architecture of policy-based access control (PDP/policy engine and PEP/API gateway)
Demonstrate Privileged Access Management (PAM) and secrets management, including credential vaulting and rotation, privileged account discovery, Just-in-Time (JIT) access, service-account governance, monitoring and auditing
Cover IAM implementation across AWS, Azure and Google Cloud, including multi-tier applications and integration with enterprise platforms such as Salesforce, SAP and Microsoft 365
Cover access logging and monitoring, and identity analytics and reporting
Build, maintain and deliver hands-on implementation labs, case studies and assessments, including virtual environment setup, directory-server configuration, SSO implementation, MFA testing, access-policy configuration, access reviews, PAM tool configuration and identity federation
Track batch attendance, performance and feedback, and resolve learner doubts
Coordinate with internal teams to complete schedules on time
Required Skills
Identity Governance: IGA, user lifecycle management, provisioning, identity certification, SoD and access governance; practical experience with IGA platforms such as SailPoint or Saviynt, and configuring identity provisioning, access certification and SoD controls
Access Management: SSO, CIAM, MFA, RBAC; practical understanding of SAML, OAuth 2.0, OpenID Connect and identity federation
Directory Services: Active Directory, LDAP/OpenLDAP, Microsoft Entra ID (Azure AD)
Policy & Enforcement: PDP/policy engine, PEP/API gateway; experience configuring access-control policies
Privileged Access & Secrets: PAM, secrets management; hands-on experience with PAM platforms such as CyberArk, Delinea or BeyondTrust, and tools such as HashiCorp Vault
Cloud & Enterprise IAM: cloud and hybrid IAM, service accounts, privileged identities and enterprise application integration
Monitoring & Analytics: access logging and monitoring, identity analytics and reporting
Lab Delivery: ability to configure IAM tools and deliver practical labs, not just explain theoretical concepts
Strong communication, presentation and facilitation skills

Work arrangement
No