Senior Identity & Access Management (IAM) Engineer

Candidate Specifications

• 6+ years of hands-on experience in enterprise IAM engineering roles.
• Expertise in Okta administration, workflow automation, and integration via Okta APIs.
• Experience with Microsoft Graph API and automation scripting (PowerShell, Python).
• Strong background in Active Directory, Entra ID, Okta, and AWS IAM management.
• Deep understanding of identity standards and protocols: SAML, OAuth2.0, OIDC, Kerberos, LDAP, SCIM, SCEP.
• Hands-on experience with PKI, including DigiCert, Microsoft PKI, AWS PCA, and SCEP-based and ACME-based certs provisioning.
• Familiarity with Privileged Access Management tools (CyberArk, BeyondTrust, Okta etc.) Experience with Imprivata or similar enterprise access platforms is a strong plus.
• Relevant certifications such as CIAM, Okta Certified Professional, or Microsoft Identity and Access Administrator are highly desirable.
• Excellent communication, problem-solving, and cross-team collaboration skills.

• Design and maintain secure, policy-driven IAM architecture supporting workforce and application access across cloud and hybrid environments.
• Define and enforce least privilege access models, lifecycle processes, and compliance standards.Administer and optimize Okta, Active Directory, Entra ID (Azure AD), and AWS IAM environments including federation, EAM, SSO, and MFA configurations.
• Support and operate PKI solutions, including DigiCert, Microsoft ADCS, and AWS Private CA.
• Ensure smooth operation of SCEP-based certificate provisioning for managed devices and systems.
• Develop and maintain Okta Workflows for identity lifecycle automation, approvals, and policy enforcement. Integrate identity processes with third-party systems using Okta APIs, Microsoft Graph API, and custom scripts (PowerShell, Python, etc.).
• Continuously identify opportunities to automate repetitive tasks and improve operational efficiency with Powershell, Python, Terraform.Implement and manage Privileged Access Management (PAM) tools and practices across critical infrastructure.
• Support integrations with EAM (Imprivata) or other clinical/workforce access systems used in the Guardant Health environments.Monitor IAM systems for anomalies and ensure timely response to incidents or alerts.
• Ensure alignment with security standards such as HIPAA, SOX, and ISO 27001. Maintain detailed documentation, architecture diagrams, and standard operating procedures in Confluence or equivalent.

Contact Person: Devikala D

Email ID: devikala@gojobs.biz