Senior Identity & Access Management Engineer

(Active Directory, Entra ID, Agentic identity)

Experience: 10+ Years
Location: Mumbai
Work Mode: Work From Office
Role Type: Senior Individual Contributor (L3 / L4)

Role Summary

We are hiring a Senior IAM Engineer with solid hands-on experience in Active Directory, Microsoft Entra ID (Azure AD), and DNS to support and enhance enterprise identity platforms. This role highly requires ownership. You will be the organization’s subject-matter expert responsible for designing, deploying, and governing identities for AI agents, service principals, managed identities, and non-human identities (NHIs) across Microsoft Entra ID and associated cloud environments. You will ensure that every agent — whether it reads a SharePoint file, triggers a Power Automate flow, or calls an external API — operates under a least-privilege, auditable, and governable identity model.

Key Responsibilities
- Design, implement, and maintain enterprise-scale Active Directory and Entra ID infrastructures, ensuring high availability, security, and scalability.




- Lead identity lifecycle management, including provisioning, deprovisioning, access reviews, and role-based access control (RBAC).
- Manage and optimize DNS infrastructure to support seamless authentication and directory services.
- Develop and enforce identity governance policies, integrating agentic identity principles by empowering users and automating secure access workflows.
- Collaborate with cross-functional teams to architect and deploy secure authentication and authorization solutions (e.g., SSO, MFA, conditional access).
- Deep understanding of OAuth 2.0 flows: Authorization Code, Client Credentials, Device Code, and On-Behalf-Of (OBO).
- OpenID Connect (OIDC) for identity federation — how ID tokens, access tokens, and refresh tokens work.
- SAML 2.0: assertions, IdP-initiated vs SP-initiated SSO, attribute mapping.
- Multi-Factor Authentication (MFA): TOTP, FIDO2/Passkeys, Windows Hel

📌 Identity & Access Management Engineer (AD, Entra ID, Agentic identity) (Mumbai)
🏢 Crisil
📍 Mumbai