IAM Technical Lead / Senior IAM Engineer

This role is for one of Weekday’s clients
Salary range: Rs 3000000 - Rs 5000000 (ie INR 30 - 50 LPA)

Min Experience: 10+ years
Location: Hyderabad, Telangana, India
JobType: full-time

We are seeking an experienced IAM Technical Lead / Senior IAM Engineer to design, engineer, enhance, and integrate enterprise Identity and Access Management (IAM) and Customer Identity and Access Management (CIAM) capabilities across cloud and on-premises environments.

The role will focus on delivering secure, resilient, scalable, and automation-driven identity solutions across platforms such as Okta, Auth0, and Microsoft Entra ID. The ideal candidate will have strong expertise in Zero Trust, authentication and authorization, identity lifecycle management, Conditional Access, federation, and application integration.

This is an engineering-focused role involving close collaboration with IAM architects, product owners, cybersecurity teams, application teams, and technology partners.

Key Responsibilities

IAM & CIAM Engineering

• Design, develop, and enhance enterprise Workforce IAM and CIAM solutions using Okta, Auth0, Okta Access Gateway, and Microsoft Entra ID.
• Engineer secure authentication and authorization solutions supporting Zero Trust, MFA, passwordless authentication, adaptive access, privileged access, and customer identity journeys.
• Design and implement federation and identity integration patterns using SAML 2.0, OAuth 2.0, OpenID Connect, and SCIM.
• Develop identity lifecycle and access management models for employees, partners, customers, and other external users.
• Design CIAM journeys covering customer registration, authentication, profile management, consent, and account lifecycle.
• Ensure IAM solutions follow security, privacy, regulatory, and organizational standards.

CIAM & Customer Identity

• Design and implement scalable CIAM architectures using Auth0 for customer-facing applications and digital platforms.
• Develop secure customer authentication flows involving social identity providers, progressive profiling, step-up authentication, and risk-aware access controls.
• Partner with application and digital product teams to integrate customer identity capabilities with applications, APIs, and platforms.
• Establish CIAM patterns that balance security, regulatory compliance, privacy, and customer experience.
• Ensure appropriate controls for consent management, data minimization, and customer data protection.

Conditional Access & Zero Trust

• Design, implement, and continuously improve Microsoft Entra Conditional Access policies aligned with Zero Trust principles.
• Develop scalable access-control patterns for workforce users, privileged accounts, devices, applications, and workload identities.
• Implement automation for policy validation, deployment, monitoring, and configuration management.
• Collaborate with security and architecture teams to strengthen identity-based security controls and Zero Trust strategies.

Platform Engineering & Automation

• Develop IAM automation using APIs, SDKs, scripting, and configuration-as-code approaches.
• Support CI/CD pipelines and controlled deployment of IAM, CIAM, and Conditional Access configurations across environments.
• Drive platform upgrades, new feature adoption, and technical debt reduction across identity platforms.
• Identify and implement engineering improvements that enhance platform security, reliability, scalability, and operational efficiency.

Application & Cloud Integration

• Partner with application teams to design and implement secure IAM and CIAM integrations for SaaS, cloud, API-based, custom, and legacy applications.
• Lead IAM technical assessments for application onboarding, migrations, cloud transformations, and modernization initiatives.
• Validate identity architecture and integrations for security, performance, production readiness, and user experience.
• Resolve complex federation, authentication, authorization, and access challenges across hybrid and multi-tenant environments.

Security & Architecture

• Ensure IAM solutions comply with enterprise security policies, architecture standards, and regulatory requirements.
• Implement identity security controls based on least privilege, strong authentication, continuous access evaluation, and defense-in-depth principles.
• Provide technical input into security assessments, audits, risk reviews, and regulatory engagements.
• Contribute to threat modelling and security design decisions involving identity compromise, unauthorized access, customer fraud, and access abuse.

Technical Leadership

• Act as a senior technical authority for IAM engineering and provide technical direction to engineers and developers.
• Mentor IAM engineers and contribute to technical standards, development practices, and engineering excellence.
• Collaborate with architects and product owners to influence IAM platform roadmaps and solution strategies.
• Work with technology partners and vendors on advanced integrations, platform capabilities, and feature adoption.
• Provide engineering-level guidance during complex IAM incidents, escalations, and technical challenges.

Documentation & Continuous Improvement

• Maintain technical designs, integration standards, IAM/CIAM guidelines, architecture documentation, and engineering runbooks.
• Participate in post-implementation and post-incident reviews from a technical and architectural perspective.
• Continuously evaluate IAM technologies and industry practices to improve security posture, platform reliability, and developer experience.
• Support knowledge sharing and establish reusable engineering patterns across IAM initiatives.

Required Qualifications & Experience

• 10–12 years of overall experience in IAM, CIAM, cybersecurity engineering, or related technology domains.
• Extensive hands-on experience with enterprise IAM platforms in large-scale environments.
• Strong expertise in Okta and Microsoft Entra ID.
• Strong understanding of IAM architecture, authentication, authorization, identity lifecycle management, and access governance.
• Experience with Zero Trust architecture and identity-centric security models.
• Hands-on knowledge of SAML, OAuth, OpenID Connect, and SCIM.
• Experience developing integrations using APIs, scripting, or programming languages such as Java, .NET, Python, PowerShell, or JavaScript.
• Experience supporting cloud-first, SaaS, API-driven, and hybrid identity architectures.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent professional experience.

Good-to-Have Skills

• Experience with CIAM implementations and customer identity platforms.
• Strong hands-on experience with Auth0.
• Experience with OAuth-based application and API integrations.
• Exposure to Okta Access Gateway and related identity technologies.
• Experience with Conditional Access policy automation and governance.
• Knowledge of identity security, privileged access, and adaptive/risk-based authentication.
• Experience working in large, global, regulated enterprise environments.

Key Competencies

• Strong analytical and problem-solving abilities with a security-first mindset.
• Ability to communicate complex IAM architectures and technical concepts to technical and non-technical stakeholders.
• Strong stakeholder management, collaboration, and influencing skills.
• Ability to provide technical leadership while remaining hands-on.
• High level of ownership, accountability, and engineering discipline.
• Comfortable working across global teams and complex enterprise environments.

Must-Have Skills

• Okta
• Entra ID
• IAM

Good-to-Have Skills

• CIAM
• OAuth