Overview:
The Identity and Access Management (IAM) Engineer will be a mid-level technical resource responsible for implementing, integrating, and supporting authentication solutions across on-premises and cloud environments. This role requires strong hands-on experience with SSO, MFA, application integrations, infrastructure components, cloud platforms, and scripting to support secure and reliable authentication services.
The ideal candidate is hands-on, technically strong, and able to troubleshoot complex authentication, integration, and infrastructure issues with limited guidance.
This role is based out of Hyderabad, India and requires coming into the office.
Responsibilities:
-
Implement and support authentication solutions across SSO, MFA, and identity federation use cases.
-
Ensure seamless user authentication experiences across applications and platforms.
-
Configure and integrate applications with IAM platforms such as Okta, Auth0, PingFederate, or similar access management tools.
-
Support authentication capabilities such as user registration, self-service, authentication, authorization, administration, audit, and reporting.
-
Integrate applications using modern protocols such as SAML, OAuth 2.0, OIDC, and header-based authentication.
-
Support IAM platform improvements that align with security, infrastructure, and business requirements.
-
Identify opportunities for improving the SSO/Okta environment and implement enhancements.
-
Work with application, infrastructure, cloud, security, and development teams to gather requirements and implement effective authentication solutions.
-
Configure access policies, sign-on policies, MFA rules, and risk-based authentication controls based on business and security requirements.
-
Collaborate with stakeholders to define and maintain authentication standards.
-
Conduct regular system audits to ensure performance and compliance with security standards.
-
Knowledge of regulatory compliance standards and experience with audit support activities.
-
Partner with Cybersecurity, API, application, and infrastructure teams to document authentication patterns, integration standards, and troubleshooting steps.
-
Stay current with emerging security threats, technologies, and industry trends to continuously improve the security posture.
-
Assesses current applications and architecture to ensure current implementations align with industry guidelines, best practices and management approved standards.
-
Develop and maintain scripts or automation to simplify IAM operations, reporting, monitoring, and integration support activities.
-
Provide advanced production support to diagnose and resolve authentication, SSO, MFA, integration, agent, network, and infrastructure-related issues.
-
Participate in incident response and security incident investigations related to IAM systems.
-
Develop and deliver applicable documentation, training, and knowledge transfer to both internal and external stakeholders.
-
Evaluate and hands on implement automation capabilities to simplify processes and deliver value/cost savings to the business.
-
Foster the Agile DevOps culture through the latest toolset to improve customer satisfaction through rapid, continuous delivery.
Qualifications:
Minimum Qualifications:
-
6+ years of overall IT experience
-
4+ years of hands-on experience supporting authentication, SSO, MFA, or access management solutions
-
4+ years of hands-on experience with Okta, Auth0, PingFederate, Azure AD/Entra ID, or comparable access management tools
-
3+ years of scripting or automation experience using PowerShell, Python, JavaScript, REST APIs, or similar technologies
-
Working knowledge of infrastructure, networking, cloud, and DevOps concepts used to support authentication platforms
-
Okta Certified Administrator or equivalent IAM certification preferred
-
BS/BA degree or equivalent experience
-
Security, cloud, or CIAM certifications are a plus
-
Experience with CIC/Auth0 platform is a plus.
Preferred Qualifications:
-
Proven track record in implementing IAM solutions in a large, complex environment.
-
Strong understanding of federated authentication, SSO, and SAML along with the ability to make recommendations, scope, and execute on opportunities for automation or improvement in identity system architecture.
-
Hands-on experience implementing authentication services in enterprise environments.
-
Experience supporting IAM or CIAM implementation activities, including requirements review, configuration, testing, and deployment.
-
Proven track record of understanding B2B and B2C customer needs and delivering solutions that enhance user experience while maintaining security and compliance standards.
-
Thorough understanding of security best practices, privacy regulations (such as GDPR, CCPA), and compliance requirements related to customer data protection.
-
Broader IAM domain experience with focus on information security
-
Deep technical expertise in solutioning and integrating B2B, B2C applications with CIAM.
-
Strong working knowledge of IAM platforms such as Okta, PingFederate, Auth0, Azure AD/Entra ID, or similar tools used to enable SSO for cloud and on-premises applications.
-
Hands-on experience building SSO integrations using SAML, OAuth 2.0, OIDC, header-based authentication, and federation patterns.
-
Experience in designing Consumer identity and access management solutions
-
Strong understanding of the latest security principles like zero trust and passwordless authentication to implement new standards in the authentication model.
-
Must have working knowledge of Okta Lifecycle Management and Administrative APIs
-
Experience with solutions like CyberArk, Beyond Trust, RSA or comparable products.
-
Excellent understanding of REST integration concepts
-
Experience in directory services like Oracle LDAP, and AD
-
Experience supporting authentication services in cloud environments such as AWS, Azure, or hybrid infrastructure.
-
Hands-on scripting or development experience using JavaScript, Python, PowerShell, Java, Node.js, REST APIs, or similar technologies.
-
Hands on experience with JavaScript, Python, Ruby, PowerShell, or other scripting languages preferred.
-
Exposure to CI/CD pipelines and deployment automation in Azure or AWS.
-
Experience with automation tools such as Ansible, Terraform, or similar infrastructure-as-code tools is preferred.
-
Experience in Monitoring tools like Splunk, ELK, Prometheus, or similar tools
-
Experience with container technologies Docker, Kubernetes
-
Experience with Linux and Windows platforms, middleware, web servers, load balancers, agents, certificates, and network troubleshooting.
-
Experience developing workflows, custom connectors, and troubleshooting complex issues.
- Experience with Agile and DevOps tools and methodologies
-
Minimum Okta Certified Administrator: Okta Certified Consultant and/or Okta Certified Developer preferred.
-
CISSP / CIAM Certification is a plus.
-
Experience in Auth0 and SiteMinder is preferred.
Non-Technical skills:
-
Exceptional communication and interpersonal skills with the ability to influence and collaborate with diverse stakeholders.
-
Deliver outcomes with a little supervision, must be a self-starter and self-motivator.
-
Strong analytical, problem-solving, and decision-making skills, with the ability to manage complex and competing priorities.
-
Strong project management and organizational skills, with the ability to deliver high-quality results.
-
Ability to think strategically and suggest creative solutions.
-
Ability to synthesize complex requirements into simple business practices.
-
Flexible and able to adapt to changing priorities.
