Identity Access Management (IAM) Engineers (4-8 years Exp.)

Job Description

Job Description We are looking for experienced and passionate Identity and Access Management (IAM) Engineers to join our team. The ideal candidates should have hands-on experience with the installation, configuration, and deployment of various IAM solutions such as PingIdentity, ForgeRock, Keycloak, Gluu, and WSO2 on both on-premise servers and cloud-native environments like EKS (Elastic Kubernetes Service) . The candidates must be well-versed in standard authentication protocols, have a strong understanding of access control policies, and should be capable of writing custom scripts to meet dynamic IAM requirements. Key Responsibilities: Install, configure, and manage IAM products (PingIdentity, ForgeRock, Keycloak, Gluu, WSO2) on Linux/Windows servers or Kubernetes clusters (EKS preferred). Design and implement secure authentication and authorization mechanisms using OAuth2, OIDC, SAML, and other industry standards. Integrate IAM solutions with internal and third-party applications using standard protocols. Design and implement high availability (HA) and high scalability IAM architectures. Create, maintain, and review solution design documents, technical implementation plans, and operational runbooks. Develop and maintain custom scripts (using shell, Python, Groovy, etc.) to automate and fulfill various IAM workflows and requirements. Collaborate with application teams and stakeholders to define and implement authorization policies and role-based access controls. Monitor system performance and ensure IAM platforms meet SLAs and compliance requirements. Troubleshoot issues related to identity federation, SSO, authentication, and authorization. Stay updated with the latest IAM trends, tools, and best practices. Requirements Required Skills & Qualifications: Educational Qualification: B.Tech/MCA/BE - IT, Computer Science 4–8 years of hands-on experience in IAM implementation and support. Strong expertise in IAM platforms such as PingIdentity, ForgeRock, Keycloak, WSO2, Gluu. Solid understanding of OAuth2.0, OIDC, SAML 2.0, LDAP, and JWT. Experience integrating IAM with diverse applications (web, mobile, APIs). Experience with Kubernetes (preferably EKS) and containerized IAM deployments. Proven experience in designing HA and scalable IAM deployments. Scripting knowledge (e.g., Bash, Python, Groovy, or others). Strong documentation skills – ability to create detailed solution design and architecture documents. Excellent communication and interpersonal skills – ability to interact with technical and non-technical stakeholders. Preferred Qualifications (Nice To Have): IAM certifications from WSO2, PingIdentity, ForgeRock, etc. Experience with DevOps tools and CI/CD pipelines. Exposure to Zero Trust architecture principles. Familiarity with cloud IAM solutions (e.g., AWS IAM, Azure AD). Benefits Opportunity to work with cutting-edge IAM technologies Flexible work environment Collaborative and growth-focused culture Exposure to challenging enterprise-scale projects Competitive salary and benefits package. Opportunities for professional development and growth. A supportive and collaborative work environment. Group health insurance coverage (cashless) Annual paid leaves Requirements Excellent English communication skills (verbal and written) Should have excellent analytical skills 4-8 years’ experience in Identity Access Management / Cyber Security Show more Show less