Job Summary
We are seeking an experienced Identity and Access Management (IAM) Engineer to design, implement, and support enterprise IAM solutions. The ideal candidate will have hands-on expertise in Okta, SailPoint, Azure Active Directory (Microsoft Entra ID), AWS IAM, SSO, MFA, Identity Federation, and Identity Lifecycle Management.
The successful candidate will be responsible for implementing secure identity solutions, automating access provisioning, integrating enterprise applications, and supporting Zero Trust security initiatives across cloud and on-premises environments.
Key Responsibilities
- Design, implement, and administer enterprise Identity and Access Management (IAM) solutions.
- Configure and manage IAM platforms including:
- Okta
- SailPoint IdentityIQ / IdentityNow
- Microsoft Entra ID (Azure Active Directory)
- AWS Identity and Access Management (AWS IAM)
- Ping Identity (PingFederate / PingOne)
- Manage the complete identity lifecycle including user provisioning, deprovisioning, onboarding, offboarding, role changes, and access reviews.
- Configure and maintain Single Sign-On (SSO) and Multi-Factor Authentication (MFA) solutions.
- Implement identity federation using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation.
- Integrate enterprise and cloud applications with IAM platforms.
- Manage Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), and least-privilege access models.
- Support Privileged Access Management (PAM) solutions for privileged accounts.
- Develop automation workflows for identity provisioning, access requests, and approvals.
- Perform access certification, governance, compliance, and audit activities.
- Troubleshoot authentication, authorization, SSO, federation, and user access issues.
- Collaborate with security, infrastructure, cloud, networking, and application teams to implement secure identity solutions.
- Maintain IAM documentation, standards, policies, and operational procedures.
Required Skills
- 5+ years of hands-on experience in Identity and Access Management (IAM).
- Strong experience with one or more IAM platforms:
- Okta
- SailPoint
- Microsoft Entra ID (Azure AD)
- AWS IAM
- Ping Identity
- Hands-on experience implementing:
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Identity Federation
- Identity Lifecycle Management
- Strong understanding of authentication and authorization protocols including:
- SAML 2.0
- OAuth 2.0
- OpenID Connect (OIDC)
- LDAP
- Active Directory
- Experience integrating SaaS and enterprise applications with IAM platforms.
- Experience with user provisioning and automated access management.
- Knowledge of AWS IAM policies, roles, users, groups, permission boundaries, and cross-account access.
- Experience with Microsoft Entra ID Conditional Access and Identity Protection.
- Strong troubleshooting and analytical skills.
- Basic scripting or automation experience using PowerShell, Python, or Bash.
- Excellent communication and documentation skills.
Preferred Skills
- Privileged Access Management (PAM) solutions such as:
- CyberArk
- Delinea (Thycotic)
- BeyondTrust
- HashiCorp Vault
- Zero Trust architecture and identity security principles.
- Identity Governance and Administration (IGA).
- ServiceNow integration and workflow automation.
- SCIM provisioning.
- REST API integration.
- Microsoft Intune.
- Conditional Access Policies.
- Cloud security best practices.
- Compliance frameworks such as ISO 27001, SOC 2, PCI-DSS, HIPAA, or GDPR.
Preferred Certifications
- Okta Certified Professional / Administrator
- SailPoint IdentityIQ or IdentityNow Certification
- Microsoft Certified: Identity and Access Administrator Associate (SC-300)
- AWS Certified Security – Specialty
Soft Skills
- Excellent problem-solving and troubleshooting skills.
- Strong analytical thinking and attention to detail.
- Ability to work independently and collaboratively.
- Strong communication and stakeholder management skills.
- Ability to manage multiple priorities in a fast-paced environment.
Why Join Us?
- Work with enterprise Identity and Access Management technologies.
- Gain exposure to cloud security and Zero Trust initiatives.
- Collaborate with global security and cloud engineering teams.
- Opportunity to work on large-scale IAM transformation projects.
- Continuous learning, certification support, and career growth opportunities.
Pay: ₹800,000.00 - ₹1,600,000.00 per year
Work Location: In person
