Identity and Access Management

Job Title: Identity and Access Management (IAM) Engineer – India (U.S. Hours)

Location: Remote (India)

Work Hours: U.S. Business Hours Reporting To: IAM Manager - U.S. Based

About the Role: We are seeking a highly skilled Identity and Access Management (IAM) Engineer to join our global security and compliance team. This position is based in India and will function as an extension of our U.S.-based IAM team. You will be responsible for managing identity lifecycle processes, user access provisioning, and compliance-driven access governance, with a strong focus on automation and process efficiency. The ideal candidate will be an expert in PowerShell scripting, Graph API, and access management in both on-premises and cloud-based environments like Active Directory and Microsoft Entra ID. Experience working in ITSM platforms (like Freshservice) and data visualization tools (such as Power BI) is essential.

Note: Candidates must have expert-level skills in all the key technologies and processes listed. This is not a training role, and no training opportunities will be provided.

Key Responsibilities:

- User Lifecycle Management
- Process user access provisioning and deprovisioning requests
- Manage onboarding, offboarding, and access role transitions
- Coordinate with HR, IT, and compliance teams to maintain identity accuracy across systems
- Access Governance and Compliance
- Execute and document periodic access reviews and entitlement audits
- Maintain strict adherence to regulatory, internal control, and SOX requirements
- Track and remediate access discrepancies to ensure policy compliance
- System and Technology Management
- Manage and Administer:
- On-premises Active Directory
- Microsoft Entra ID (Azure AD) – SSO, MFA, Conditional Access, Adaptive MFA
- Microsoft 365 and Microsoft Teams access controls
- Windows LAPS (Local Administrator Password Solution) for secure local admin account management
- Managed Identities and Azure Key Vault for secure service identity and secret management
- Federated identity protocols, including SAML 2.0 and OIDC (OpenID Connect)
- Build, update documentations/SOPs
- Automation and Reporting
- Build and maintain PowerShell scripts for IAM operations (must be expert level)
- Leverage Microsoft Graph API for advanced identity automation and data integration
- Design and maintain IAM metrics dashboards using Power BI
- ITSM and Workflow Management
- Process and resolve IAM service requests via Freshservice ITSM
- Follow and contribute to Change Management processes
- Identify opportunities to streamline and automate IAM workflows

Required Skills and Qualifications:

- 3–6 years of direct experience in IAM engineering or equivalent security/IT roles
- Expert-level proficiency in:
- PowerShell scripting
- Microsoft Graph API
- Demonstrated experience managing:
- Active Directory (on-prem)
- Microsoft Entra ID (Azure AD) including SSO, MFA, Conditional Access
- Managed Identities and Azure Key Vault
- SAML 2.0 and OIDC integrations
- Windows LAPS configuration and management
- Proven experience in Microsoft 365/Teams access control
- Solid understanding of access governance, least privilege, RBAC, and compliance audits
- Working knowledge of ITSM systems (Freshservice preferred)
- Strong skills in reporting and visualization using Power BI
- Familiarity with change control processes and policy enforcement
- Excellent communication and documentation skills
- Must be able to work independently during India evening shift aligned to U.S. business hours

Preferred Qualifications:

- Microsoft certifications (e.g., Azure Administrator, Security Engineer Associate)
- Experience with workflow engines or automated provisioning solutions
- Background in highly regulated environments (e.g., healthcare, finance, enterprise IT)

---