Role : Senior Identity & Access Management (IAM) Engineer

Location : Bangalore, India (Hybrid)

Duration : Full-time (Permanent)

Position Overview :

We are seeking a highly skilled Senior Identity & Access Management (IAM) Engineer with 8 - 10 years of hands-on experience. The candidate must possess strong expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID.

Key Responsibilities :

- Design and develop custom SSO/identity broker solutions, including non-standard authentication flows and legacy app integrations.

- Design, implement, and maintain SSO integrations using OneLogin and Entra ID.

- Deep, protocol-level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers.

- Design and implementation of custom MFA and risk-based authentication flows.

- Experience with FIDO2 / WebAuthn, certificate-based authentication, or device trust models.

- Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.

- Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.

- Ability to perform authentication and authorization threat modeling.

- Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).

Tech Stack & Requirements :

- 8 - 10 years of IAM engineering experience.

- Strong hands-on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.

- Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers.

- Preferred SSO product experience : OneLogin and Okta or Microsoft Entra ID.

- Strong scripting experience (Python, PowerShell, Bash).

- Experience with custom IAM solution development (APIs, SDKs, identity workflows).

- Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.

Soft Skills :

- Excellent oral and written communication skills.

- Ability to work cross-functionally and explain complex issues in simple terms.

- Strong analytical and problem-solving skills.

- Strong documentation and presentation abilities.

Preferred Qualifications :

- Experience with OneLogin mappings, policies, and API-based integrations.

- Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity.

- Relevant certifications such as SC-300, OneLogin Professional, CISSP.