Paramount Computer Systems
Website:
paramountassure.com
Job details:
Job Role - RBAC Specialist - SailPoint
Location – India/Remote
Job Type - Full-time
Experience Level:
3+ years of dedicated experience focusing on role engineering, role mining, SoD and RBAC design.
Project Overview:
We are seeking an experienced IAM Consultant to lead a targeted Role Discovery and RBAC (Role-Based Access Control) Matrix initiative in a highly regulated banking environment, ensuring precise access alignment is critical for operational efficiency, fraud prevention, and regulatory compliance (e.g., SAMA, NCA, CBUAE, SCA, VARA, GDPR, PCI-DSS).
The consultant will analyze current access patterns across key financial and operational applications, design a scalable RBAC framework, and deliver a comprehensive, audit-ready RBAC Matrix.
Key Responsibilities:
1. Role Discovery & Analysis
- Conduct interviews and workshops with business unit leads, application owners, and risk teams to understand business functions and operational workflows.
- Analyze existing user access data, entitlements, and group memberships to identify patterns, redundancies, and ""birthright"" access requirements.
- Perform Segregation of Duties (SoD) risk analysis to ensure no single role contains toxic combinations of access (e.g., creating vs. approving a wire transfer).
2. RBAC Architecture & Matrix Design
- Define and map out Business Roles (what a person does) to Technical Roles (what system entitlements they need).
- Build a comprehensive, multi-dimensional RBAC Matrix that clearly aligns job functions with specific application permissions.
- Establish clear naming conventions and structural rules for roles that align with modern IAM governance frameworks.
3. Documentation & Handover
- Create formal documentation outlining the role engineering methodology, discovery findings, and assumptions made during the project.
- Document a governance framework/process for how the new RBAC matrix should be maintained, reviewed, and updated as business needs to evolve.
- Provide an implementation-ready roadmap for our internal engineering/IAM team to ingest the matrix into our IAM/IGA platforms.
- A standard operating procedure (SOP) detailing how to request new roles, modify existing ones, and perform periodic access reviews."
Required Skills & Qualifications:
Banking/Finance Expertise: Strong understanding of banking applications, financial workflows, and strict regulatory frameworks (e.g., SAMA, NCA, CBUAE, SCA, VARA, GDPR, PCI-DSS).
Technical Proficiency:
- Advanced data manipulation skills (Expert-level Excel/PowerBI, or Python/SQL) to parse and clean massive entitlement dumps.
- Experience with major IGA/IAM platforms (e.g., SailPoint, Saviynt, Microsoft Entra ID) is highly preferred to ensure the final matrix format.
Soft Skills: Excellent stakeholder management and communication skills. You must be comfortable translating technical system entitlements into business logic when talking to non-technical business leaders.
Click on Apply to know more.