About Our Company
Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.
Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.
Job Description
We are looking for an IAM/CIAM Engineer to design, implement, and support enterprise identity solutions. The role focuses on authentication, authorization, Single Sign-On (SSO), Multi-Factor Authentication (MFA), identity federation, IAM platform administration, and secure application integrations. The candidate will work with modern identity platforms such as Ping Identity, SiteMinder, Azure AD B2C, Okta, and related technologies while contributing to application security and cloud-based deployments.
Key Responsibilities
IAM & CIAM Engineering
-
Implement and support IAM/CIAM solutions for enterprise and customer-facing applications.
-
Integrate applications with IAM platforms and identity providers.
-
Configure and support SSO, MFA, federation, RBAC, and access governance capabilities.
-
Participate in IAM platform upgrades, migrations, and modernization initiatives.
-
Develop and maintain identity integrations across on-premises and cloud environments.
Authentication & Federation
-
Work with authentication and federation standards including:
-
OAuth 2.0
-
OpenID Connect (OIDC)
-
SAML 2.0
-
JWT
-
Configure and troubleshoot SSO and federated authentication solutions.
-
Support secure authentication journeys across applications and APIs.
IAM Platform Administration
-
Work with IAM technologies such as:
-
PingFederate / PingAccess / PingDirectory
-
Broadcom SiteMinder
-
Layer7 API Gateway
-
Azure AD B2C
-
Okta
-
Support platform configuration, policy management, upgrades, and security hardening.
-
Assist in troubleshooting IAM platform issues and operational activities.
Secure Development & Security
-
Develop secure integrations and applications using Java, Spring Boot, Spring Security, and REST APIs.
-
Implement authentication and authorization controls in applications.
-
Apply OWASP secure coding practices and remediate security vulnerabilities.
-
Support vulnerability remediation identified through security assessments and scanning tools.
Cloud & DevSecOps
-
Support IAM-related deployments in AWS environments.
-
Work with Docker, Kubernetes, and CI/CD pipelines.
-
Contribute to automation, monitoring, and secure deployment practices.
Collaboration
-
Work closely with IAM architects, application teams, security teams, and cloud engineers.
-
Participate in design reviews, security assessments, and compliance activities.
Required Skills & Experience
Identity & Access Management
-
2-5 years of experience in IAM, CIAM, Access Management, or Security Engineering.
-
Experience with one or more IAM platforms such as Ping Federate, SiteMinder, Azure AD, Okta, or similar solutions.
-
Good understanding of identity lifecycle management, authentication, authorization, and federation.
Authentication Technologies
-
OAuth 2.0
-
OpenID Connect (OIDC)
-
SAML 2.0
-
JWT
-
SSO and MFA
Development & Security
-
Strong experience with Java, Spring Boot, and REST APIs.
-
Knowledge of Spring Security and secure application development.
-
Understanding of OWASP Top 10 and vulnerability remediation practices.
-
Experience with security scanning tools such as Prisma, Tennable, Veracode, SonarQube, X-Ray or similar.
Cloud & Platform Skills
-
Exposure to AWS services and cloud-based deployments.
-
Experience with Docker, Kubernetes, and CI/CD pipelines.
-
Scripting or automation experience is a plus.
Preferred Qualifications
-
Experience with IAM modernization or migration projects.
-
Knowledge of Zero Trust concepts.
-
Experience with Terraform or Infrastructure as Code.
-
Exposure to Java, Spring Security or other backend frameworks.
-
Relevant certifications in IAM, Cloud, or Security.
Behavioral Competencies
-
Strong analytical and problem-solving skills.
-
Security-first mindset.
-
Effective communication and collaboration skills.
-
Ability to work independently and in cross-functional teams.
-
Passion for identity and security technologies.
In-Office Collaboration
-
We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.
Full time
(4:45p-1:15a)
AWMPO AWMP&S President's Office
Technology
Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.
We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.
