IAM Engineer

Design, implement, and manage IAM solutions supporting the IoT ecosystem. Maintain and enhance directory services using LDAP-based systems, particularly Oracle Unified Directory (OUD). Configure, customize, and operate WSO2 Identity Server, including user federation, SSO, and identity provisioning flows. Integrate IAM systems with APIs, web services, and cloud-based platforms to enforce authentication and authorization policies. Develop automation scripts for IAM-related operations and provisioning tasks. Ensure high availability, performance tuning, and disaster recovery of IAM components. Work with enterprise architects to align IAM strategies with overall security and integration roadmaps. Document solution designs, configurations, and IAM policies to ensure transparency and maintainability. Troubleshoot identity-related issues across development, staging, and production environments. Stay current with evolving security standards, identity protocols, and best practices in access control. Solid experience with LDAP protocols and enterprise directory services (preferably OUD); Hands-on experience configuring and managing WSO2 Identity Server or similar IAM platforms (e.g., ForgeRock, Keycloak); Understanding of identity federation protocols (SAML, OIDC, OAuth 2.0); Proficient in scripting and automation (e.g., Bash, Python, or Ansible) to manage IAM tasks and configurations; Familiarity with RBAC, SCIM, multi-factor authentication, and SSO implementations; Basic understanding of security compliance standards (e.g., GDPR, ISO 27001); Experience integrating IAM with backend systems, APIs, and microservices; Knowledge of DevOps practices and tools related to secure deployment pipelines; Excellent analytical, communication, and troubleshooting skills; Fluency in English.