IAM Security Engineer

We are looking for an IAM Security Engineer to build and strengthen our identity and access security controls across cloud, SaaS, and internal systems. In this role, you will be responsible for implementing practical Zero Trust principles, ensuring secure authentication, enabling Single Sign-On (SSO), enforcing Multi-Factor Authentication (MFA), and handling other key security tasks. Join our team to help protect sensitive data and improve the overall security posture of our systems.ResponsibilitiesImplement and maintain IAM controls across cloud, SaaS, and internal platformsConfigure and optimize SSO integrations using SAML, OAuth 2.0, and OIDCDesign and refine MFA and Conditional Access policies Support secure user lifecycle processes, including Joiner, Mover, and Leaver (JML) activitiesParticipate in access reviews and privilege cleanup activitiesTroubleshoot authentication and authorization issuesAnalyze authentication events and provide technical expertise for identity-related investigationsCollaborate with Engineering and IT teams to ensure secure onboarding of applications and access modelsEnsure alignment with audit and compliance requirements related to IAM controlsContribute to practical Zero Trust improvements based on company priorities and maturityRequirements3+ years of hands-on experience in IT or Information Security with a dedicated focus on Identity and Access Management (IAM), authentication, SSO, MFA, access control and user administrationPractical experience with major Identity Providers such as Microsoft Entra ID, Okta, or similar solutionsSolid grasp of identity standards, including SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC)Proven ability to configure SSO integrations, manage MFA policies, and administer user/group/role hierarchiesStrong understanding of Least Privilege, Conditional Access frameworks, and Joiner-Mover-Leaver (JML) lifecyclesAbility to troubleshoot authentication issues and analyze identity-related logsProficiency in PowerShell, Python or BashEnglish - Intermediate or higher (for free communication)Will be a plusPractical experience in automating identity workflows, including user provisioning, deprovisioning, access reviews, and role-based access assignmentsExperience in enterprise-scale Fintech, Banking, or Telecom industriesWe offer20 paid vacation days per year10 paid sick leave days per yearPublic holidays as per the company’s approved Public holiday listMedical insuranceOpportunity to work remotelyProfessional education budgetLanguage learning budgetWellness budget (gym membership, sports gear and related expenses)Originally posted on Himalayas