One Identity Manager ()

If you need support in completing the application or if you require a different format of this document please get in touch with at with the subject line: Application Support Request.

Job Type: Permanent
Location: Letterkenny Co. Donegal; Onsite

Join a global tech leader right here in Donegal. With over 850 employees and a state-of-the-art global delivery centre were proud to offer world-class career opportunities without having to leave the Northwest. Recognised as Workplace of the Year by the Letterkenny Chamber we foster a culture of continuous learning innovation and respect. Our people are at the heart of everything we do collaborating across teams geographies and disciplines to drive real change for clients around the world. Be part of something global grounded in Donegal.

Careers at TCS: It means more
TCS is a purpose-led transformation company built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you it means more to make an impact that matters through challenging projects which demand ambitious innovation and thought leadership.

• Gain access to endlesslearning opportunities.
• Fast track your growth with diverse career opportunities internally.
• Grow your career while being exposed to new technologies.

The Role
The One Identity Manager (1IM) Specialist is responsible for the governance automation and security of digital identities and access across the organisation.

You will work to ensure that user service and privileged identities are managed through controlled auditable lifecycle processes integrating Active Directory (onprem and hybrid) Entra ID (Azure AD) and connected applications into a central Identity Governance & Administration (IGA) platform.

The role will focus on policydriven access management role and entitlement modelling compliance and automation rather than daytoday operation of directory infrastructure. All the time working closely with AD administrators security teams HR and application owners to ensure identities are secure compliant and aligned to business needs.

Key Responsibilities:
Design and manage identity lifecycle (Joiner/Mover/Leaver) processes using One Identity Manager
Automate provisioning and deprovisioning across Active Directory Entra ID and business applications
Integrate authoritative data sources (e.g. HR systems) and manage identity attributes and reconciliation
Define and maintain role models RBAC entitlements and access governance structures
Govern privileged shared service and nonhuman identities across environments
Integrate and govern hybrid identity environments spanning onprem AD and Entra ID
Enforce least privilege segregation of duties and policy compliance controls
Support audits access certifications and identity risk reporting
Automate workflows approvals and access requests using One Identity Manager and PowerShell
Act as an escalation point for identity incidents and collaborate with security SOC and business stakeholders
Work with public key infrastructure (PKI) and certificate-based authentication
Manage Flexible Single Master Operation (FSMO) roles to control specific AD operations

Your Profile
Essential skills/knowledge/experience:
Minimum 5 years experience in cybersecurity IAM or enterprise identity platforms with at least 3 years focused on Identity Governance and Administration (IGA) solutions such as One Identity Manager.
Proven experience operating in complex enterprise identity environments including onpremises Active Directory and hybrid/cloud identity platforms (Entra ID / Azure AD).
Strong expertise in designing and implementing identity lifecycle management (Joiner Mover Leaver) using One Identity Manager
Ability to leverage policydriven identity processes to reduce risk and manual administration.
Deep understanding of rolebased access control (RBAC) entitlementbased access models and segregation of duties (SoD)
Experience defining and maintaining Business roles and IT roles Access packages and entitlement structures Governing AD groups Entra ID roles and application entitlements
Ability to analyse access patterns and identify excessive orphaned or conflicting access
Strong working knowledge of Active Directory user group and permission models Delegation models and group nesting strategies Hybrid identity concepts (AD Entra ID)
Experience integrating One Identity Manager with Onprem AD forests/domains Entra ID / Azure AD
Experience supporting access reviews certifications and attestations through One Identity Manager.
Familiarity with security and compliance frameworks where identity is a core control (e.g. ISO 27001 NIST SOC 2).
Ability to assess identityrelated risks and translate them into governance controls.
Strong capability in identityfocused analysis including Investigating access anomalies & identifying misconfigured or highrisk identities
Strong analytical and problemsolving skills particularly in analysing complex access and role structures.
Ability to clearly document identity processes role models and governance controls.

Desirable skills/knowledge/experience:
One Identity Manager (1IM) Administrator or Engineer certification
Microsoft Certified: Identity and Access Administrator Associate
Microsoft Certified: Security Identity and Access Administrator
Experience with Identity Governance and Administration (IGA) solutions in enterprise environments
Experience implementing Joiner / Mover / Leaver (JML) processes
Knowledge of RoleBased Access Control (RBAC) and entitlementbased access models
Experience with access certification recertification and attestation processes
Exposure to hybrid identity environments (onprem AD cloud identity)
General security certifications such as:
CISSP
CompTIA Security
CompTIA CySA

Rewards & Benefits
TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension health care life assurance laptop and access to extensive training resources and discounts within the larger Tata network.
We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon and partner with our local communities in Ireland.

Diversity Inclusion and Wellbeing
Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the Ireland Employment Equality Acts 1998-2011 (as amended) and the Equal Status Acts 2000-2012 (as amended).
We welcome and embrace diversity in race nationality ethnicity disability neurodiversity gender identity age physical ability gender reassignment sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role.
As a Disability Confident Employer we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role. Please email us if you would like to opt in.
If you are an applicant who needs any adjustments to the application process or interview please contact us the subject line: Adjustment Request or email to request an adjustment. We welcome requests prior to you completing the application and at any stage of the recruitment process.

Beware of Fraudulent offers
This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail Yahoo Mail and so on. TCS has not authorised any third-party company to collect money on their behalf. As a vigilant job seeker beware of fraudulent recruitment activity and protect your interests! You can write to to report any fraudulent activity.

Due to the high volume of applications we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days then it should be deemed unsuccessful on this occasion.

Join us and do more of what matters. Apply online now.