Identity & Access Management Technical Lead

Job description

About Our Company Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection. Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP. Job Description Seeking a highly skilled IAM Engineer with strong expertise in Azure cloud implementation, configuration, development, automation, and production support. The candidate will lead Azure and Identity services, support enterprise-scale environments, drive operational excellence, and work closely with Program Delivery Leads. This position requires participation in rotational shifts and providing support for critical production services. Key Responsibilities Azure Cloud & Infrastructure • Design, implement, and manage Azure cloud infrastructure and services. • Administer Azure subscriptions, networking, compute, storage, security, and governance. • Support cloud migration, modernization, and transformation initiatives. • Ensure high availability, performance, and reliability of Azure environments. Azure Identity & Access Management • Manage and support Azure Entra ID (Azure AD), MFA, Conditional Access, RBAC, and Identity Governance. • Integrate applications with Azure Entra ID and enterprise identity platforms. • Support authentication, authorization, and federation services- SSO & IAM Solutions • Configure and troubleshoot SSO integrations using SAML, OAuth, OIDC, and LDAP. • Support and administer IAM platforms such as: • Broadcom SiteMinder • PingFederate • PingAccess • Azure Entra ID • Okta • Support application onboarding, federation, and access management activities. Automation & Development • Develop automation solutions using PowerShell, Azure Automation, Logic Apps, Functions, and REST APIs. • Implement Infrastructure as Code using Terraform, ARM Templates, or Bicep. • Drive operational efficiency through automation and self-service solutions. Monitoring & Production Support • Monitor cloud and IAM platforms using Azure Monitor, Log Analytics, Dynatrace, Splunk, or similar tools. • Perform incident troubleshooting, root cause analysis, and service restoration. • Support 24x7 production environments and critical business applications. ITIL & Service Management • Manage Incident, Problem, Change, and Release processes. • Ensure compliance with ITIL best practices and operational procedures. • Maintain technical documentation, SOPs, and operational runbooks. Leadership & Delivery • Lead and mentor engineering teams. • Collaborate with Program Delivery Leads, architects, security teams, and business stakeholders. • Drive project delivery, service improvements, and technical governance. • Manage risks, dependencies, and stakeholder communications. Required Qualifications • 7-10 years of experience in Azure Cloud Administration, Engineering, and Support. • Strong expertise in Microsoft Azure, including Azure Entra ID, Networking, Compute, Storage, Security, and Governance. • Hands-on experience with Azure Entra ID, MFA, Conditional Access, RBAC, Identity Governance, and PIM. • Strong knowledge of SSO and Federation technologies including SAML, OAuth, OIDC, LDAP, and SCIM. • Experience with IAM platforms such as SiteMinder, PingFederate, PingAccess, Okta, or similar solutions. • Experience integrating enterprise applications with SSO and Identity Providers. • Hands-on experience in PowerShell scripting, Azure Automation, Logic Apps, Azure Functions, and REST APIs. • Experience with monitoring tools such as Azure Monitor, Log Analytics, Dynatrace, Splunk, or equivalent. • Good understanding of ITIL processes, including Incident, Problem, Change, and Release Management. • Experience supporting critical production environments and participating in 24x7 rotational shifts. • Proven ability to lead technical teams and work closely with Program Delivery Leads and business stakeholders. • AWS IAM and multi-cloud experience will be an added advantage. Preferred Qualifications • Microsoft Azure certifications such as AZ-104, AZ-305, or SC-300. • Experience with SiteMinder, Ping Identity Suite (PingFederate, PingAccess), and Okta. • Knowledge of CyberArk and Privileged Access Management concepts. • Experience with Terraform, Bicep, ARM Templates, Azure DevOps, and CI/CD pipelin