Job Summary:

nThe Senior IAM Developer is responsible for engineering, enhancing, and integrating global Workforce IAM and Customer Identity and Access Management (CIAM) capabilities to enable secure, resilient, and scalable access to applications and digital services. This role delivers secure by design IAM, CIAM, and Conditional Access solutions across cloud and on prem environments, with a strong emphasis on Zero Trust enforcement, customer identity journeys,

nautomation, identity lifecycle management, and access governance. The role works closely with IAM product owners, architects, cybersecurity, application teams, and strategic vendors and is engineering led, with no primary responsibility for day to day operational support.

n

nKey Responsibilities:

nIAM & CIAM Engineering and Solution Delivery:

n● Design, develop, and enhance Workforce IAM and CIAM solutions across Okta, Okta Auth0,

nOkta Access Gateway, Microsoft Entra ID (Azure AD), and Conditional Access.

n● Engineer authentication solutions supporting Zero Trust and CIAM use cases, including MFA,

npasswordless authentication, adaptive and risk based access, privileged access, and customer identity flows.

n● Design and implement secure authentication, authorization, and federation patterns using

nSAML 2.0, OAuth 2.0, OpenID Connect, and SCIM.

n● Deliver identity lifecycle and access models for workforce users, partners, and customers,

nincluding CIAM sign up, sign in, profile management, and consent flows.

n

nCIAM (Customer Identity) Enablement – Okta Auth0:

n● Design and implement CIAM architectures using Okta Auth0 for customer facing and digital

napplications.

n● Engineer secure and scalable customer authentication flows, including social identity

nproviders, progressive profiling, step up authentication, and fraud aware access controls.

n● Define CIAM patterns that balance security, regulatory compliance, and customer experience.

n● Partner with digital application teams to integrate Auth0 into customer platforms and APIs.

n● Ensure CIAM implementations align with privacy, data protection, and regulatory requirements

n(e.g., consent, minimal data collection).

n

nConditional Access & Zero Trust Enablement:

n● Design, implement, and continuously improve Conditional Access policies aligned with org's

nsecurity standards and Zero Trust architecture.

n● Define scalable Conditional Access patterns for workforce users,



privileged roles, devices,

napplications, and workload identities.

n● Engineer policy automation, validation, and secure deployment mechanisms to reduce risk and

nconfiguration drift.

n● Partner with security and architecture teams to evolve baseline protections and Zero Trust

nstrategy.

n

nPlatform Engineering & Automation:

n● Develop automation using APIs, SDKs, scripting, and configuration as code to improve IAM

nand CIAM platform reliability and efficiency.

n● Support CI/CD pipelines and controlled promotion of IAM, CIAM, and Conditional Access

nchanges across environments.

n● Contribute to platform upgrades, new feature adoption, and continuous reduction of technical

ndebt across Okta, Auth0, and Entra ID.

n● Proactively implement engineering improvements that enhance security, resilience, and

nscalability.

n

nApplication & Cloud Integration:

n● Partner with application teams to design and deliver secure IAM, CIAM, and Conditional

nAccess integrations for SaaS, cloud, custom, API based, and legacy applications.

n● Lead IAM and CIAM technical assessments during application onboarding, migrations, and

ncloud transformations.

n● Validate IAM and CIAM designs to ensure production readiness, security compliance, and

nuser experience.

n● Resolve complex federation and access challenges across hybrid and multi tenant

nenvironments.

n

nSecurity, Risk & Architecture Alignment:

n● Ensure all IAM, CIAM, and Conditional Access solutions comply with org's security policies,

narchitectural standards, and regulatory requirements.

n● Implement controls supporting least privilege, strong authentication, continuous access

nevaluation, and defense in depth.

n● Provide technical input to risk assessments, audits, security reviews, and regulatory

nengagements.

n● Contribute to threat modeling and design decisions related to identity compromise, customer

nfraud, and access abuse scenarios.

n

nTechnical Leadership & Collaboration:





n● Act as a senior technical authority and mentor for IAM engineers and developers.

n● Collaborate with IAM architects and product owners to influence platform roadmaps, CIAM

nstrategy, Conditional Access standards, and solution direction.

n● Work with strategic vendors and partners (e.g., Okta/Auth0, Microsoft) to support advanced

nintegrations and feature adoption.

n● Provide engineering level guidance during complex IAM and CIAM incidents and escalations.

nDocumentation & Continuous Improvement:

n● Maintain technical designs, integration standards, CIAM and Conditional Access guidelines,

nand engineering runbooks.

n● Contribute to post implementation and post incident reviews from a solution and architecture

nperspective.

n● Continuously evaluate IAM and CIAM technologies to improve security posture, service

nquality, and developer experience.

n

nAdditional Information:

n● Operates in a global IAM and CIAM environment with cross regional collaboration.

n● Occasional participation in after hours releases for IAM, CIAM, or Conditional Access may be

nrequired.

n

nTechnical Skills:

n● Extensive experience (typically 8+ years) in IAM and/or CIAM engineering within a large

nenterprise environment.

n● Strong hands on experience with Okta Workforce IAM and Okta Auth0 (CIAM) and/or

nMicrosoft Entra ID Conditional Access.

n● Deep understanding of Zero Trust architecture, CIAM patterns, authentication, authorization,

nand identity lifecycle management.

n● Proven experience with SAML, OAuth, OpenID Connect, and SCIM.

n● Experience developing integrations using APIs, scripting, or programming languages (Java,

n.NET, Python, PowerShell, JavaScript).

n● Experience supporting cloud first, SaaS, API driven, and hybrid identity architectures.

n

nSoft Skills:

n● Strong analytical mindset with a security first, customer aware engineering approach.

n● Ability to clearly articulate complex IAM, CIAM, and Conditional Access designs to diverse

nstakeholders.

n● Comfortable operating in a global, regulated, and risk focused environment.

n● Strong collaboration, influencing, and stakeholder management skills.

n● High standards of ownership, accountability, and engineering excellence.

n

nEducation:

n● Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or equivalent

nprofessional experience.

📌 Senior IAM Engineer (Hyderabad)
🏢 nexocean
📍 Hyderabad