Group Manager: Identity & Access Management (IAM) DevSecOps Practice
Key Skills for This Role
SAMLOIDCOAuth 2.0OktaPing IdentityCyberArk
Full Job Posting
About Position
Are you passionate about IT security, access governance, and its application across a global enterprise? Are you experienced in modern cloud-native security paradigms and convinced by the business added value of embedding automated Site Reliability Engineering (SRE) and DevSecOps practices across a complex product landscape?
Airbus is looking for a Group Manager IAM & DevSecOps Practice Lead to join the Bengaluru, India location.
Position Overview: Lead the global Identity and Access Management (IAM) engineering team within the Enterprise CyberSecurity & Infrastructure Department. Beyond direct operational delivery, this critical role serves as the global Practice Lead for all SREs and DevSecOps professionals across the entire IAM landscape. The scope encompasses securing and driving resilience across both commercial off-the-shelf (COTS) integrations and bespoke internally-built (Make) applications. Success requires exceptional disciplinary leadership, deep identity-centric security expertise, and the capability to foster a high-performance culture of automated, secure engineering.
The successful candidate will establish team goals by identifying, evaluating, and understanding the business strategy & technical trends. He/She will accomplish the team results/performance by communicating job expectations, planning, monitoring, coaching, and leading the team in the right direction.
Qualification & Experience
Education: Master's or Bachelor's degree in Computer Science, Cyber Security, Information Technology, or a relevant engineering discipline.
Experience: 12+ years in Cyber Security, Identity Management, and IT Operations, including proven disciplinary leadership, team management, and global platform ownership.
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
Domain Knowledge: Professional background in managing critical enterprise scale environments is required (Aerospace industry background is a plus). Highly specific expertise in Identity Governance, Enterprise Security Architectures, and global practice leadership is mandatory.
Technical Stack & Domain Expertise: Architectural proficiency in modern identity and deployment ecosystems, specifically: IAM Core: Single Sign-On (SSO), Federation (SAML, OIDC, OAuth 2.0), Customer/Enterprise IAM (e.g., Okta, Ping Identity, Azure AD/Entra ID), Directory Services, and Privilege Access Management (PAM - e.g., CyberArk). IGA & Compliance: Identity Governance & Administration (IGA - e.g., SailPoint), lifecycle management, and automated access provisioning/de-provisioning. DevSecOps Automation: Continuous security integration (SAST/DAST, dependency scanning), Infrastructure as Code (IaC - Terraform, Ansible), Policy as Code (Open Policy Agent), and automated CI/CD security gating. SRE Frameworks: Continuous monitoring, observability (e.g., Dynatrace, Datadog, Prometheus), error budgets, automated incident remediation, and high-availability architecture for identity services. Product Landscapes: Managing and securing mixed portfolios spanning global COTS platforms (enterprise software deployments) and custom Make cloud-native applications.
IAM Core: Single Sign-On (SSO), Federation (SAML, OIDC, OAuth 2.0), Customer/Enterprise IAM (e.g., Okta, Ping Identity, Azure AD/Entra ID), Directory Services, and Privilege Access Management (PAM - e.g., CyberArk).
IGA & Compliance: Identity Governance & Administration (IGA - e.g., SailPoint), lifecycle management, and automated access provisioning/de-provisioning.
DevSecOps Automation: Continuous security integration (SAST/DAST, dependency scanning), Infrastructure as Code (IaC - Terraform, Ansible), Policy as Code (Open Policy Agent), and automated CI/CD security gating.
SRE Frameworks: Continuous monitoring, observability (e.g., Dynatrace, Datadog, Prometheus), error budgets, automated incident remediation, and high-availability architecture for identity services.
Product Landscapes: Managing and securing mixed portfolios spanning global COTS platforms (enterprise software deployments) and custom Make cloud-native applications.
Preferred Certifications: Security & Identity Certifications: CISSP, CCSP, CISM, or advanced vendor-specific certifications (Okta Certified Professional, Microsoft Identity and Access Administrator). SRE & DevOps Certifications: Certified DevSecOps Professional, AWS/Azure DevOps Engineer Expert. Service & Project Management: ITIL v4, PMP, or SAFe Agilist.
Security & Identity Certifications: CISSP, CCSP, CISM, or advanced vendor-specific certifications (Okta Certified Professional, Microsoft Identity and Access Administrator).
Service & Project Management: ITIL v4, PMP, or SAFe Agilist.
Methodologies: Advanced knowledge of Agile/SAFe frameworks, SRE principles (SLA/SLO/SLI management), DevSecOps maturity matrices, and Zero Trust security models.
Travel: Willingness to travel to Europe for up to 1 month p.a., if needed on short notice.
Language & Soft Skills: Business-fluent English and strong communication skills for continuous collaboration with European partners, product owners, and engineering leads globally. Proficiency in German is a plus.
Core Responsibilities
Team Leadership & Practice Guild: Manage, coach, and develop the local IAM engineering team. Serve as the global Guild/Practice Lead for SRE and DevSecOps engineering across IAM PSL, driving capability models, standardization of blueprints, and talent upskilling across disparate product teams.
Global IAM Operations: Ensure high-availability, low-latency identity service operations (strict SLA fulfillment) and secure access management across all global corporate touchpoints.
COTS & Make Security Governance: Oversee the secure onboarding and structural lifecycle management of all COTS packages and custom Make applications spread across the global Airbus landscape, ensuring strict alignment with security baselines.
Technical Steer: Enforce modern identity engineering and SRE standards, driving the absolute transition toward automated, shift-left DevSecOps principles and cloud-native cloud identity architectures.
Intercultural Orchestration: Act as the strategic and operational bridge between the Bengaluru hub and global European partners, unifying engineering methodologies across global product boundaries.
Empowerment & Culture: Empower team members by delegating authority and encouraging individual responsibility for system reliability and security goals. Cultivate a workplace environment that mirrors the organization's strategic digital objectives.
Logistics & Governance: Administer operational logistics including global shift rotations, follow-the-sun operational structures, and leave management. Ensure clear, transparent, and effective communication across the team.
Escalation & Incident Management: Actively resolve critical identity-related security escalations, lead post-mortem root-cause analysis (RCA) for operational outages, and protect corporate SLAs.
Continuous Improvement: Apply enterprise-wide perspectives to identify and address emerging threat vectors and reliability challenges. Regularly integrate lessons learned to drive multi-axial continuous improvement. Collaborate with senior management and project boards to provide progress updates.
Success will be measured in a variety of areas, including but not limited to
Successful deployment and adoption of standardized DevSecOps and SRE practices across all global Airbus application portfolios.
Flawless SLA fulfillment, high availability, and near-zero downtime of core enterprise IAM platforms globally.
Accelerated remediation times of security vulnerabilities within CI/CD pipelines across COTS integrations and Make products.
Collaborative way of working, rapid reaction times in case of operational identity issues or security escalations.
Bringing innovative, cost-effective, and robust automated identity solutions.
Achieving high internal customer and developer community satisfaction.
Airbus is proud to be an equal opportunity employer and is committed to creating an inclusive and diverse work environment. Airbus India selects job applicants (internal and external) on the basis of suitability for the job, and irrespective of gender, marital status, age, sexual orientation, gender identity or expression, nationality, religion, ethnicity or different abled/ (dis)ability.
This job requires an awareness of any potential compliance risks and a commitment to act with integrity, as the foundation for the Company’s success, reputation and sustainable growth.
Company:
Employment Type
-------
Job Family
By submitting your CV or application you are consenting to Airbus using and storing information about you for monitoring purposes relating to your application or future employment. This information will only be used by Airbus. Airbus is committed to achieving workforce diversity and creating an inclusive working environment. We welcome all applications irrespective of social and cultural background, age, gender, disability, sexual orientation or religious belief.
Airbus is, and always has been, committed to equal opportunities for all. As such, we will never ask for any type of monetary exchange in the frame of a recruitment process. Any impersonation of Airbus to do so should be reported to emsom@airbus.com .
At Airbus, we support you to work, connect and collaborate more easily and flexibly. Wherever possible, we foster flexible working arrangements to stimulate innovative thinking.
About Ag
Verified company details for this employer are not available yet.
