Project Description:

We are seeking a highly skilled Senior Identity & Access Management (IAM) Engineer with 8–10 years of hands-on experience. The candidate must possess robust expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID.

Responsibilities:
Design and develop custom SSO/identity broker solutions, including non‑standard authentication flows and legacy app integrations
Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
Deep, protocol‑level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers
Design and implementation of custom MFA and risk‑based authentication flows.
Experience with FIDO2 / WebAuthn, certificate‑based authentication, or device trust models
Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.
Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.
Ability to perform authentication and authorization threat modeling
Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).





Mandatory Skills Description:
8–10 years of IAM engineering experience.
Robust hands-on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.
Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers
Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID.
Solid scripting experience (Python, PowerShell, Bash).
Experience with custom IAM solution development (APIs, SDKs, identity workflows).
Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.
Excellent oral and written communication skills.
Ability to work cross-functionally and explain complex issues in simple terms.
Strong analytical and problem-solving skills.
Strong documentation and presentation abilities

Nice-to-Have Skills Description:
Experience with OneLogin mappings, policies, and API-based integrations.
Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity.
Relevant certifications such as SC-300, OneLogin Professional, CISSP.

Languages:

English: C1 Advanced

📌 Senior Iam Engineer Bengaluru (India)
🏢 Luxoft
📍 India