Senior Engineer, Identity Access Management (IAM Engineer)

Job description

Senior Engineer, Identity Access Management The Identity & Access Management (IAM) Engineer is responsible for supporting, administering, engineering, and continuously improving enterprise identity and access management services. This role works as part of the Digital Identity & Access team to deliver secure, reliable, and efficient identity services across the organization. The IAM Engineer will support identity lifecycle management, authentication, Single Sign-On (SSO), Multi-Factor Authentication (MFA), Conditional Access, application integrations, certificates, and related identity technologies. The successful candidate will combine strong technical capabilities with disciplined operational practices, documentation, change management, and collaboration across Technology and Information Security teams. This is a hybrid role and work hours are 2pm – 11pm IST. Responsibilities: Identity & Access Management • Support the administration and engineering of enterprise identity and access management platforms and services. • Configure and maintain Single Sign-On (SSO), Multi-Factor Authentication (MFA), authentication policies, and Conditional Access controls. • Support Microsoft Entra ID and Active Directory identity services. • Support identity lifecycle processes including user provisioning, modification, deprovisioning, and access changes. • Troubleshoot complex authentication, authorization, and access-related issues. • Support application onboarding and integration with enterprise identity platforms using technologies and standards such as SAML, OAuth, OpenID Connect, and related authentication protocols. • Support identity federation and authentication integrations with SaaS, cloud, and internally developed applications. • Assist with the administration and support of Auth0 and other enterprise authentication platforms. • Support role-based access control and group-based access management. Identity Security & Governance • Partner with Information Security to implement and maintain identity security standards and controls. • Support periodic access reviews, certifications, audit requests, and compliance activities. • Assist with the implementation and maintenance of appropriate separation-of-duties controls. • Identify excessive, inappropriate, or outdated access and work with appropriate stakeholders to remediate identified issues. • Support privileged identity and access management processes where applicable. • Assist with investigation and remediation of identity-related security events. • Ensure identity configurations and processes align with organizational security standards and established governance requirements. PKI & Certificate Management • Support enterprise Public Key Infrastructure (PKI) and certificate-management processes. • Monitor certificate expiration and coordinate certificate renewals to prevent service disruption. • Assist application and technology teams with certificate requests, renewals, deployment, and troubleshooting. • Maintain accurate documentation and visibility into enterprise certificates and associated ownership. Engineering & Automation • Identify opportunities to automate repetitive IAM activities and improve operational efficiency. • Develop and maintain scripts and automation supporting identity administration, reporting, provisioning, and operational processes. • Support integrations between IAM platforms, enterprise applications, HR systems, and other technology services. • Participate in identity-platform upgrades, enhancements, migrations, and modernization initiatives. • Contribute to the development and maintenance of IAM architecture, standards, technical documentation, and operational procedures. Service Management & Operations • Manage IAM incidents, requests, problems, and changes in accordance with established service-management processes. • Develop implementation, testing, validation, rollback, and communication plans for production changes. • Ensure changes are appropriately documented, reviewed, approved, and communicated prior to implementation. • Maintain accurate and timely visibility into assigned work, projects, changes, risks, and commitments. • Develop and maintain technical documentation, standard operating procedures, knowledge articles, and support runbooks. • Participate in troubleshooting and resolution of major incidents involving identity or authentication services. • Identify recurring issues and contribute to root-cause analysis and permanent corrective actions. Collaboration & Customer Experience • Partner with Digital Workplace, Information Security, Infrastructure, Application Development, Enterprise Systems, HR, Service Management, and other technology teams. • Provide technical guidance to application owners integrating applications with enterprise identity services. • Communicate technical issues, risks, dependencies, and recommendations clearly to both technical and non-technical stakeholders. • Balance security requirements with the need to provide reliable and intuitive authentication and access experiences for practitioners. • Demonstrate a collaborative, accountable, and service-oriented approach to delivering identity services. Essential traits: • 3–5+ years of experience supporting or engineering enterprise Identity & Access Management technologies. • Hands-on experience with Microsoft Entra ID and Active Directory. • Experience implementing or supporting Single Sign-On (SSO), Multi-Factor Authentication (MFA), and Conditional Access. • Experience integrating enterprise applications using SAML, OAuth 2.0, OpenID Connect, or similar authentication standards. • Experience troubleshooting complex authentication and access-related issues. • Understanding of identity lifecycle management, including provisioning, deprovisioning, access changes, and role/group management. • Working knowledge of identity security principles, least privilege, role-based access c