Associate Staff IAM Support Analyst

'

: - ( - )

Experience: 10+ yrs

Location: Hyderabad

Job Type: Full-time

We are looking for a highly experienced IAM Developer to engineer, enhance, and integrate global Workforce Identity and Access Management (IAM) and Customer Identity and Access Management (CIAM) solutions. The role focuses on building secure, resilient, and scalable identity capabilities across cloud and on-premises environments.

The ideal candidate will have deep hands-on expertise in Okta Workforce IAM, Okta Auth0, Microsoft Entra ID, Conditional Access, Zero Trust, identity lifecycle management, authentication, authorization, and federation. This is an engineering-focused role with an emphasis on solution delivery, automation, application integration, and continuous platform improvement rather than day-to-day operational support.

Key Responsibilities

• Design, develop, and enhance Workforce IAM and CIAM solutions using Okta, Okta Auth0, Okta Access Gateway, and Microsoft Entra ID.
• Engineer secure authentication solutions supporting Zero Trust, MFA, passwordless authentication, adaptive and risk-based access, privileged access, and customer identity journeys.
• Design and implement authentication, authorization, and federation solutions using SAML 2.0, OAuth 2.0, OpenID Connect, and SCIM.
• Develop identity lifecycle and access models for workforce users, partners, and customers.
• Design and implement CIAM architectures using Okta Auth0 for customer-facing applications and digital platforms.
• Build secure customer authentication journeys including social identity, progressive profiling, step-up authentication, and consent management.
• Integrate Auth0 with customer platforms, APIs, SaaS applications, and digital services.
• Design solutions that balance security, privacy, regulatory compliance, and customer experience.
• Design and continuously improve Microsoft Entra ID Conditional Access policies aligned with Zero Trust principles.
• Develop scalable Conditional Access patterns for users, privileged roles, devices, applications, and workload identities.
• Implement automation for policy validation, controlled deployment, configuration management, and reduction of configuration drift.
• Develop IAM and CIAM automation using APIs, SDKs, scripting, and configuration-as-code.
• Support CI/CD pipelines and controlled promotion of IAM, CIAM, and Conditional Access changes across environments.
• Contribute to platform upgrades, feature adoption, technical-debt reduction, and engineering improvements across identity platforms.
• Partner with application teams to deliver secure IAM and CIAM integrations across cloud, SaaS, API-based, custom, and legacy applications.
• Lead technical IAM/CIAM assessments for application onboarding, migrations, and cloud transformation initiatives.
• Troubleshoot and resolve complex federation, authentication, and access challenges across hybrid and multi-tenant environments.
• Ensure identity solutions comply with security policies, architecture standards, privacy requirements, and regulatory controls.
• Support least privilege, strong authentication, continuous access evaluation, and defence-in-depth security principles.
• Contribute to threat modelling, risk assessments, security reviews, audits, and identity-related regulatory engagements.
• Act as a senior technical authority and mentor for IAM engineers and developers.
• Collaborate with architects, product owners, security teams, and technology vendors to influence IAM and CIAM roadmaps.
• Maintain technical designs, integration standards, engineering guidelines, and implementation runbooks.
• Participate in post-implementation and post-incident reviews and drive continuous engineering improvements.

What Makes You a Great Fit

• 10+ years of experience in IAM, CIAM, identity engineering, cybersecurity, or a closely related domain, preferably within large enterprise environments.
• Strong hands-on expertise with Okta Workforce IAM and Okta Auth0 (CIAM) and/or Microsoft Entra ID Conditional Access.
• Deep understanding of Zero Trust architecture, authentication, authorization, federation, CIAM patterns, and identity lifecycle management.
• Strong experience with SAML, OAuth, OpenID Connect, and SCIM.
• Proven experience designing and developing IAM/CIAM integrations using APIs, SDKs, scripting, or programming languages such as Java, .NET, Python, PowerShell, or JavaScript.
• Strong understanding of cloud-first, SaaS, API-driven, hybrid, and multi-tenant identity architectures.
• Experience with MFA, passwordless authentication, adaptive authentication, privileged access, and risk-based access controls.
• Hands-on experience with customer identity journeys including registration, authentication, profile management, consent, and step-up authentication.
• Strong understanding of Conditional Access policy design, automation, governance, and Zero Trust enforcement.
• Experience integrating identity platforms with enterprise applications and digital services.
• Strong understanding of identity security, privacy, access governance, and least-privilege principles.
• Strong analytical and problem-solving skills with a security-first and customer-aware engineering mindset.
• Excellent communication skills with the ability to explain complex identity architectures to technical and non-technical stakeholders.
• Strong collaboration, influencing, and stakeholder-management abilities.
• Comfortable working in a global, regulated, and risk-focused environment.
• High level of ownership, accountability, and commitment to engineering excellence.
• Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent professional experience.
• Willingness to participate in occasional after-hours releases or global engineering activities when required.