If you need support in completing the application or if you require a different format of this document, please get in touch with at UKI.recruitment@tcs.com with the subject line: “Application Support Request”.

Job Type: Permanent
Location: Letterkenny, Co. Donegal; Onsite

Join a global tech leader right here in Donegal. With over 850 employees and a state-of-the-art global delivery centre, we’re proud to offer world-class career opportunities without having to leave the Northwest. Recognised as Workplace of the Year by the Letterkenny Chamber, we foster a culture of continuous learning, innovation, and respect. Our people are at the heart of everything we do – collaborating across teams, geographies, and disciplines to drive real change for clients around the world. Be part of something global, grounded in Donegal.

Careers at TCS: It means more
TCS is a purpose-led transformation company, built on belief. We do not just help businesses to transform through technology. We support them in making a meaningful difference to the people and communities they serve - our clients include some of the biggest brands in the UK and worldwide. For you, it means more to make an impact that matters, through challenging projects which demand ambitious innovation and thought leadership.

• Gain access to endless learning opportunities.
• Fast track your growth with diverse career opportunities internally.
• Grow your career, while being exposed to new technologies.

The Role
The One Identity Manager (1IM) Specialist is responsible for the governance, automation, and security of digital identities and access across the organisation.

You will work to ensure that user, service, and privileged identities are managed through controlled, auditable lifecycle processes, integrating Active Directory (on‑prem and hybrid), Entra ID (Azure AD), and connected applications into a central Identity Governance & Administration (IGA) platform.

The role will focus on policy‑driven access management, role and entitlement modelling, compliance, and automation, rather than day‑to‑day operation of directory infrastructure. All the time working closely with AD administrators, security teams, HR, and application owners to ensure identities are secure, compliant, and aligned to business needs.

Key Responsibilities:
Design and manage identity lifecycle (Joiner/Mover/Leaver) processes using One Identity Manager
Automate provisioning and deprovisioning across Active Directory, Entra ID, and business applications
Integrate authoritative data sources (e.g. HR systems) and manage identity attributes and reconciliation
Define and maintain role models, RBAC, entitlements, and access governance structures
Govern privileged, shared, service, and non‑human identities across environments
Integrate and govern hybrid identity environments spanning on‑prem AD and Entra ID
Enforce least privilege, segregation of duties, and policy compliance controls
Support audits, access certifications, and identity risk reporting
Automate workflows, approvals, and access requests using One Identity Manager and PowerShell
Act as an escalation point for identity incidents and collaborate with security, SOC, and business stakeholders
Work with public key infrastructure (PKI) and certificate-based authentication
Manage Flexible Single Master Operation (FSMO) roles to control specific AD operations

Your Profile
Essential skills/knowledge/experience:
Minimum 5+ years’ experience in cybersecurity, IAM, or enterprise identity platforms, with at least 3+ years focused on Identity Governance and Administration (IGA) solutions such as One Identity Manager.
Proven experience operating in complex enterprise identity environments, including on‑premises Active Directory and hybrid/cloud identity platforms (Entra ID / Azure AD).
Strong expertise in designing and implementing identity lifecycle management (Joiner, Mover, Leaver) using One Identity Manager
Ability to leverage policy‑driven identity processes to reduce risk and manual administration.
Deep understanding of role‑based access control (RBAC), entitlement‑based access models, and segregation of duties (SoD)
Experience defining and maintaining Business roles and IT roles, Access packages and entitlement structures, Governing AD groups, Entra ID roles, and application entitlements
Ability to analyse access patterns and identify excessive, orphaned, or conflicting access
Strong working knowledge of Active Directory user, group, and permission models, Delegation models and group nesting strategies, Hybrid identity concepts (AD + Entra ID)
Experience integrating One Identity Manager with On‑prem AD forests/domains, Entra ID / Azure AD
Experience supporting access reviews, certifications, and attestations through One Identity Manager.
Familiarity with security and compliance frameworks where identity is a core control (e.g. ISO 27001, NIST, SOC 2).
Ability to assess identity‑related risks and translate them into governance controls.
Strong capability in identity‑focused analysis, including Investigating access anomalies & identifying misconfigured or high‑risk identities
Strong analytical and problem‑solving skills, particularly in analysing complex access and role structures.
Ability to clearly document identity processes, role models, and governance controls.

Desirable skills/knowledge/experience:
One Identity Manager (1IM) Administrator or Engineer certification
Microsoft Certified: Identity and Access Administrator Associate
Microsoft Certified: Security Identity and Access Administrator
Experience with Identity Governance and Administration (IGA) solutions in enterprise environments
Experience implementing Joiner / Mover / Leaver (JML) processes
Knowledge of Role‑Based Access Control (RBAC) and entitlement‑based access models
Experience with access certification, recertification, and attestation processes
Exposure to hybrid identity environments (on‑prem AD + cloud identity)
General security certifications such as:
CISSP
CompTIA Security+
CompTIA CySA+

Rewards & Benefits
TCS is consistently voted a Top Employer in the UK and globally. Our competitive salary packages feature pension, health care, life assurance, laptop and access to extensive training resources and discounts within the larger Tata network.
We offer health & wellness initiatives and sports events; we are the proud sponsor of the London Marathon and partner with our local communities in Ireland.

Diversity, Inclusion and Wellbeing
Tata Consultancy Services UK&I is committed to meeting the accessibility needs of all individuals in accordance with the Ireland Employment Equality Acts 1998-2011 (as amended) and the Equal Status Acts 2000-2012 (as amended).
We welcome and embrace diversity in race, nationality, ethnicity, disability, neurodiversity, gender identity, age, physical ability, gender reassignment, sexual orientation. We are a disability inclusive employer and encourage disabled people to apply for this role.
As a Disability Confident Employer, we offer an interview to applicants with disabilities or long-term conditions who meet the minimum criteria for the role. Please email us at UKI.recruitment@tcs.com if you would like to opt in.
If you are an applicant who needs any adjustments to the application process or interview, please contact us at UKI.recruitment@tcs.com with the subject line: “Adjustment Request” or email jennifer.long@tcs.com to request an adjustment. We welcome requests prior to you completing the application and at any stage of the recruitment process.

Beware of Fraudulent offers
This is to notify you that TCS does not ask for any sort of payment or security deposit from candidates at any stage of the recruitment process. The firm never sends out job offers from free internet email services like Gmail, Yahoo Mail, and so on. TCS has not authorised any third-party company to collect money on their behalf. As a vigilant job seeker, beware of fraudulent recruitment activity and protect your interests! You can write to UKI.recruitment@tcs.com to report any fraudulent activity.

Due to the high volume of applications, we will be unable to contact each applicant individually on the status of their application. If you have not received a direct response within 30 days, then it should be deemed unsuccessful on this occasion.

Join us and do more of what matters. Apply online now.