Senior CIAM Engineer

Job Title : Senior Identity and Access Management (IAM)

Experience : 5-7 Years

Location : Hyderabad

Job Type : Full-time

Role Overview:

We are seeking an experienced Senior IAM Engineer to join our team, responsible for designing, implementing, and managing Identity and Access Management solutions. In this role, you will work with various IAM technologies, including OAuth, OIDC, SAML, and Okta, integrating IAM platforms, and ensuring secure access management across enterprise applications. The ideal candidate will possess strong expertise in cloud IAM (AWS/Azure), API integrations, security best practices, and software development (Java/.NET).

Must-Have Skills:

• Authentication & Authorization :
• Deep expertise in Auth0, OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Hands-on experience with Okta for identity and access management.
• Troubleshooting & Debugging :
• Strong troubleshooting skills, able to analyze logs and resolve authentication/authorization issues.
• Experience troubleshooting SAML assertions, OAuth tokens, and API integrations.
• IAM or CIAM :
• Extensive experience with Identity and Access Management (IAM) and Customer Identity Access Management (CIAM) solutions.
• Proficient in managing user lifecycles, and implementing RBAC (Role-Based Access Control) and ABAC (Attribute-Based Access Control).
• Security & Compliance :
• Strong understanding of IAM security best practices and standards.
• Familiar with IAM policies, compliance requirements, and governance frameworks.
• API Integration & Development :
• Experience in integrating IAM solutions with REST APIs, handling security tokens and JSON.
• Familiar with IAM-related API integrations.
  • Cloud IAM :
  • Expertise in AWS or Microsoft Azure or Google Cloud Platform , including managing cloud-based IAM policies and configurations.
  • Coding & Development :
  • Knowledge of Java or .NET, particularly in relation to IAM integration and authentication-related development.
  • Ability to read, debug, and troubleshoot application code for IAM-related issues.

Good-to-Have Skills:

• Experience with Federation Services (e.g., ADFS, Ping Identity, ForgeRock).
• Exposure to Privileged Access Management (PAM) solutions.
• Understanding of Zero Trust Security Models.
• Familiarity with DevSecOps practices.

Key Responsibilities:

• Manage IAM projects, ensuring secure authentication and access control across various applications and platforms.
• Design, implement, and maintain IAM solutions, leveraging protocols such as Auth0, OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Integrate IAM solutions (including Okta, AWS Cognito, Azure AD) with enterprise and cloud-based applications.
• Troubleshoot and resolve IAM-related issues, including authentication/authorization failures, SAML assertions, OAuth token issues, and API integration errors.
• Manage user lifecycles, configure Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC) policies.
• Collaborate with development teams to implement secure coding practices related to IAM.
• Work closely with the security team to enforce IAM security best practices, compliance, and governance.
• Participate in the continuous improvement of IAM processes, integrating new technologies and keeping up with industry trends.
• Maintain knowledge of IAM policies, compliance standards, and governance frameworks.

Preferred Qualifications:

• Education : Bachelor's or Master's degree in Computer Science, Cybersecurity, or a related field.
• Certifications (Preferred):
• CISSP (Certified Information Systems Security Professional).
• CIAM (Customer Identity and Access Management) Certification.
• Okta Certified Professional.
• AWS Certified Security – Specialty.
• Microsoft Identity & Access Administrator.

Key Attributes:

• Willingness to learn and adapt to new IAM technologies and practices.
• Strong problem-solving skills and the ability to work in a fast-paced, dynamic environment.
• Excellent collaboration and communication skills to work effectively with security and development teams.