IAM Engineer

Job description

About Our Company Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection. Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP. Job Description Azure IAM Engineer will be responsible for engineering, administration, automation, and operational support of enterprise Identity & Access Management platforms with a primary focus on Microsoft Entra ID (Azure AD), Active Directory, Azure MFA, SSO, Federation, and Identity Governance solutions. This role requires a strong DevOps mindset, automation expertise, and participation in a 24x7 rotational support model to ensure platform stability, security, and service availability. Key Responsibilities • Design, implement, administer, and support enterprise IAM solutions centered around Microsoft Entra ID (Azure AD), Active Directory, Azure MFA, Conditional Access, and Identity Governance. • Integrate applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM provisioning standards. • Provide L2/L3 production support for IAM platforms, ensuring high availability and adherence to SLA commitments. • Monitor platform health, analyze incidents, perform root cause analysis (RCA), and implement preventive measures. • Support onboarding of applications to SSO, MFA, and modern authentication platforms. • Develop and maintain automation solutions using PowerShell, Microsoft Graph API, Python, or REST APIs to improve operational efficiency. • Manage and support Entra ID lifecycle activities, authentication policies, Conditional Access policies, and access governance processes. • Participate in incident, problem, change, and release management activities. • Perform system health checks, trend analysis, capacity planning, and platform optimization. • Collaborate with infrastructure, security, network, cloud, and application teams to resolve complex IAM issues. • Support disaster recovery testing, resiliency exercises, and operational readiness activities. • Contribute to CI/CD implementation and infrastructure automation initiatives. • Create and maintain technical documentation, operational runbooks, SOPs, and knowledge articles. • Participate in a 24x7 rotational shift model, including weekends and off-hours support when required. • Drive continuous improvement initiatives and identify opportunities for automation and modernization within IAM services. • Work closely with global onsite and offshore teams to deliver secure and scalable identity solutions. Required Qualifications • Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline. • 2-4 years of experience in Identity & Access Management and Production Support environments. • Hands-on experience with: Microsoft Entra ID (Azure AD) Active Directory Azure MFA Conditional Access SSO & Federation Technologies Identity Governance & Lifecycle Management • Strong understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM. • Experience troubleshooting authentication, authorization, and identity federation issues. • Strong scripting and automation experience using PowerShell, Python, or REST APIs. • Experience supporting critical enterprise platforms in a 24x7 environment. • Excellent analytical, troubleshooting, and problem-solving skills. • Strong verbal and written communication skills. • Willingness to work in rotational shifts and global support model. Preferred Qualifications • Experience with Microsoft Entra ID Governance, Access Reviews, Entitlement Management, and Privileged Identity Management (PIM). • Experience with DevOps and CI/CD tools including Azure DevOps, Jenkins, Bitbucket, GitHub, Ansible, Jira, and Confluence. • Experience with monitoring and observability tools such as Dynatrace, ScienceLogic, SiteScope, CA APM (Wily), Azure Monitor, and Sumo Logic. • Exposure to cloud platforms including Microsoft Azure and AWS. • Good understanding of containers and orchestration technologies such as Docker and Kubernetes. • Exposure to IIS, Tomcat, and modern application architectures. • Experience supporting large-scale enterprise IAM environments and cloud identity transformations. • Knowledge of Zero Trust Security principles and modern authentication frameworks.  In-Office Collaboration We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office