We are seeking a highly experienced IAM Technical Lead with deep expertise in One Identity Manager (OneIM) to lead IAM transformation, NPA governance, entitlement remediation, and role governance initiatives.

The consultant will act as the bridge between business stakeholders and development teams, driving solution design, validating technical implementations, and providing hands-on guidance across One Identity Manager environments.

Key Responsibilities

One Identity Leadership

- Serve as the SME and Technical Lead for One Identity Manager.
- Define target-state IAM architecture and solution designs.
- Review and improve existing IAM processes, workflows, and configurations.
- Guide developers on configuration, customization, and implementation approaches.
- Perform design reviews and solution validation.

NPA Governance & Remediation

- Lead discovery and remediation of orphaned Non-Personal Accounts (NPAs).
- Define ownership, accountability, and lifecycle controls for NPAs.
- Design monitoring, certification, and recertification processes.
- Implement scalable NPA governance frameworks.

Entitlement & Data Cleansing

- Lead entitlement rationalization and cleanup initiatives.
- Identify orphaned entitlements and excessive access.
- Drive access remediation programs.
- Define sustainable governance controls to prevent reoccurrence.

Business Roles & Access Governance

- Design and optimize RBAC models.
- Define birthright access strategies.
- Establish access request and approval models.
- Support role mining and entitlement mapping activities.

SoD & Compliance

- Analyze Segregation of Duties risks.
- Define SoD controls involving privileged and non-personal accounts.
- Align IAM controls with audit and compliance requirements.
- Support certification and access review programs.

Technical Validation

- Perform hands-on validation within One Identity Manager.
- Execute SQL queries for troubleshooting and data verification.
- Investigate synchronization, provisioning, and governance issues.
- Review synchronization jobs, workflows,



and connector configurations.

Mandatory Skills

One Identity Manager

- 5+ years hands-on One Identity Manager experience.
- Experience with OneIM versions 8.x and/or 9.x preferred.
- Strong understanding of:
- Identity Lifecycle Management
- IT Shop
- Application Governance
- Attestation
- Role Management
- Access Certification
- Approval Workflows
- Synchronization Engine
- Object Layer

Technical Skills

- SQL querying and database validation.
- PowerShell scripting.
- Connector integrations.
- AD / Entra ID integration.
- Troubleshooting synchronization and provisioning issues.

IAM Expertise

- NPA Governance.
- Birthright Access.
- Role-Based Access Control (RBAC).
- Segregation of Duties (SoD).
- Entitlement Governance.
- Access Certification.
- Joiner-Mover-Leaver processes.

Preferred Experience

- One Identity Manager implementation or upgrade projects.
- Application onboarding.
- Data cleanup and remediation programs.
- IAM transformation initiatives.
- Financial Services / Insurance environments.

About HCLTech:

We are HCLTech, one of the fastest-growing large tech companies in the world and home to 225,000+ people across 60 countries, supercharging progress through industry-leading capabilities centered around Digital, Engineering and Cloud. The driving force behind that work, our people, are diverse, creative, and passionate, raising the bar for excellence on a regular basis.

We, in turn, work hard to bring out the best in them as we strive to help them find their spark and become the best version of themselves that they can be. If all this sounds like an environment you’ll thrive in, then you’re in the right place.



Join us on our journey in advancing the technological world through innovation and creativity.

Why Us?

- We offer End-to-end digital transformation expertise that helps clients from strategy through execution. We work with the biggest brands, offering the opportunity to be a part of industry-leading work.
- We are invested in your growth, offering learning and career development opportunities at every level to help you find your spark.
- We offer freedom and flexibility on the job, empowering our employees to make decisions.
- We offer a virtual-first work environment, promoting a good work-life balance and real flexibility Our company is extremely diverse with representation of 165 nationalities.
- We offer the opportunity to work with colleagues across the globe.
- We are a certified great place to work and a top employer in 25 countries including Romania, offering a positive work environment that values employee recognition and respect.

If you have a valid disability certificate, Certificate of Disability in Force, please contact us.

Among HCL's principles we would like to highlight diversity and inclusion as a strength in our values and practices. To achieve all our objectives, it intends to attract, develop, and retain different profiles, assuming diversity as a key factor and differentiator of fundamental innovation in our organization. We welcome and value all people, and we are committed to the inclusion and sense of belonging of each person who is part of HCL.

- HCL is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to age, ancestry, color, family or medical care leave, gender identity or expression, genetic information, marital status, medical condition, national origin, physical or mental disability, political affiliation, protected veteran status, race, religion, sex (including pregnancy), sexual orientation, or any other characteristic protected by applicable laws, regulations, and ordinances.

📌 Senior IAM Technical Lead - One Identity Manager (Madrid)
🏢 HCLTech
📍 Madrid