Identity Access Management Engineer

Job Title:

Experience Level:

Location:

Employment Type:

Job Overview:

Identity and Access Management (IAM) Engineers

The candidates must be well-versed in standard authentication protocols, have a strong understanding of access control policies, and should be capable of writing custom scripts to meet dynamic IAM requirements.

Key Responsibilities:

• Install, configure, and manage IAM products (PingIdentity, ForgeRock, Keycloak, Gluu, WSO2) on Linux/Windows servers or Kubernetes clusters (EKS preferred).
• Design and implement secure authentication and authorization mechanisms using

  OAuth2, OIDC, SAML

  , and other industry standards.
• Integrate IAM solutions with internal and third-party applications using standard protocols.
• Design and implement

  high availability (HA)

  and

  high scalability

  IAM architectures.
• Create, maintain, and review

  solution design documents

  , technical implementation plans, and operational runbooks.
• Develop and maintain

  custom scripts

  (using shell, Python, Groovy, etc.) to automate and fulfill various IAM workflows and requirements.
• Collaborate with application teams and stakeholders to define and implement

  authorization policies

  and role-based access controls.
• Monitor system performance and ensure IAM platforms meet SLAs and compliance requirements.
• Troubleshoot issues related to identity federation, SSO, authentication, and authorization.
• Stay updated with the latest IAM trends, tools, and best practices.

Required Skills & Qualifications:

• 4–8 years of hands-on experience in IAM implementation and support.
• Strong expertise in IAM platforms such as

  PingIdentity, ForgeRock, Keycloak, WSO2, Gluu

  .
• Solid understanding of

  OAuth2.0, OIDC, SAML 2.0, LDAP, and JWT

  .
• Experience integrating IAM with diverse applications (web, mobile, APIs).
• Experience with

  Kubernetes (preferably EKS)

  and containerized IAM deployments.
• Proven experience in designing

  HA and scalable

  IAM deployments.
• Scripting knowledge (e.g., Bash, Python, Groovy, or others).
• Strong documentation skills – ability to create detailed

  solution design and architecture documents

  .
• Excellent

  communication and interpersonal

  skills – ability to interact with technical and non-technical stakeholders.

Preferred Qualifications (Nice to Have):

• IAM certifications from WSO2, PingIdentity, ForgeRock, etc.
• Experience with DevOps tools and CI/CD pipelines.
• Exposure to Zero Trust architecture principles.
• Familiarity with cloud IAM solutions (e.g., AWS IAM, Azure AD).

Location:

Bhubaneswar, Odisha( On-site)

sweta@centroxy.com