Designation: Security Engineer II (Senior IAM Engineer - Cloud Security / Identity & Access Management)
Work Location: Bangalore (Work from Office - Mandatory)
Working Hours: 10:00 PM – 7:00 AM (IST) - Weekend on-call rotation, 8-hour shifts
Qualification: Bachelor’s degree in Computer Science, Information Technology, Cybersecurity or a related technical discipline. Equivalent professional experience may be considered in lieu of a degree.
Certifications - Preferred:
- CISSP
- SSCP
- CCSP
- Microsoft Certified: Azure Security Engineer Associate (AZ-500)
- Okta Certified Professional
- AWS Certified Security – Specialty
- Google Cloud Professional Cloud Security Engineer
- Other equivalent IAM, cybersecurity or cloud-security certifications
Experience: Minimum 5+ years of professional experience in Identity & Access Management, Cybersecurity, Cloud Security or related identity domains.
Salary: INR 11 LPA (Maximum)
Role Description: The Senior IAM Engineer will be responsible for operating, maintaining and improving enterprise Identity & Access Management (IAM) services across a large-scale multi-cloud environment, including AWS, Azure, GCP and OCI. The role will focus on authentication, SSO, federation, RBAC, access governance, identity lifecycle management, cloud IAM, application onboarding, troubleshooting, security compliance and IAM automation. The engineer will collaborate with global security and technology teams to ensure secure, reliable and least-privilege access across enterprise systems while providing real-time support during US business hours.
Responsibilities:
- Operate and maintain authentication, authorization, federation, SSO, identity lifecycle and access governance services.
- Manage users, roles, policies, service accounts, managed identities and permissions across AWS, Azure, GCP and OCI.
- Design and enforce RBAC, least-privilege access, MFA, Conditional Access and privileged-access controls.
- Implement and troubleshoot SAML, OAuth 2.0, OIDC, SCIM, LDAP and other identity integrations across enterprise applications and cloud platforms.
- Configure IAM controls, security baselines, access models and identity integrations for new cloud accounts, subscriptions, projects and applications.
- Conduct periodic access certifications, identify excessive or inactive permissions and support remediation in line with security and compliance requirements.
- Investigate and resolve complex authentication, authorization, access and identity-related incidents while meeting operational SLAs.
- Develop or contribute to scripts, tools, workflows and automation for provisioning, deprovisioning, access reviews, compliance reporting and operational efficiency.
- Assist with audits, evidence collection, policy enforcement, security hardening, incident response and remediation of IAM-related risks.
- Document runbooks and procedures, perform structured shift handoffs, collaborate with global teams and participate in weekend on-call rotations.
Required Skills:
- 5+ years of hands-on experience in IAM, including authentication, authorization, federation, identity lifecycle and access governance.
- Strong hands-on experience with IAM across at least two of AWS, Azure and GCP, including roles, policies, service accounts, managed identities and cross-account/project access.
- Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), SCIM, LDAP and Kerberos.
- Experience with platforms such as Okta, Microsoft Entra ID, Ping, SailPoint, Saviynt, CyberArk or equivalent IAM technologies.
- Strong understanding of RBAC, least privilege, MFA, Conditional Access, privileged access, access reviews and identity governance.
- Proven ability to troubleshoot complex IAM and authentication issues in enterprise environments, with experience using ServiceNow, Jira or similar ITSM tools.
- Strong security mindset with the ability to automate IAM processes using Python, Bash, PowerShell, JavaScript or similar scripting technologies, along with excellent analytical and problem-solving skills.
Desired Skills:
- Experience with Oracle Cloud Infrastructure IAM, including compartments, policies, dynamic groups, Vault and key management.
- Experience automating provisioning, deprovisioning, access reviews, compliance reporting and IAM workflows using Python, Bash, PowerShell or similar.
- Knowledge of Terraform, CloudFormation, Pulumi or Bicep, along with CI/CD pipelines and API integrations.
- Experience with CyberArk, BeyondTrust, cloud-native PIM/PAM solutions and encryption/key-management services such as AWS KMS, Azure Key Vault or Google Cloud KMS.
- Experience leading IAM projects, mentoring engineers, influencing technical direction and working effectively in global 24x7/shift-based operations environments.
Pay: Up to ₹1,100,000.00 per year
Application Question(s):
- Which enterprise IAM platforms (e.g., Okta, Microsoft Entra ID, SailPoint, Saviynt, Ping, CyberArk) have you worked with?
- Which of Cloud IAM (AWS / Azure / GCP) have you worked with extensively?
- Do you have hands-on experience with SAML, OAuth 2.0, OIDC, SCIM, LDAP and Kerberos?
- Are you comfortable working from the Bangalore office, working the 10:00 PM–7:00 AM (IST) night shift and participating in an 8-hour weekend on-call rotation when required? (Yes / No)
Experience:
- Identity & Access Management (IAM): 5 years (Required)
Work Location: In person
