Project Description: We are seeking a highly skilled Senior Identity & Access Management (IAM) Engineer with 8–10 years of hands-on experience. The candidate must possess strong expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID. Responsibilities: • Design and develop custom SSO/identity broker solutions, including non‑standard authentication flows and legacy app integrations • Design, implement, and maintain SSO integrations using OneLogin and Entra ID. • Deep, protocol‑level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers • Design and implementation of custom MFA and risk‑based authentication flows. • Experience with FIDO2 / WebAuthn, certificate‑based authentication, or device trust models • Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting. • Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation. • Ability to perform authentication and authorization threat modeling • Collaborate with engineering, application,



and security teams as the IAM subject matter expert (SME). Mandatory Skills Description: • 8–10 years of IAM engineering experience. • Strong hands-on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA. • Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers • Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID. • Strong scripting experience (Python, PowerShell, Bash). • Experience with custom IAM solution development (APIs, SDKs, identity workflows). • Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management. • Excellent oral and written communication skills. • Ability to work cross-functionally and explain complex issues in simple terms. • Strong analytical and problem-solving skills. • Robust documentation and presentation abilities Nice-to-Have Skills Description: • Experience with OneLogin mappings, policies, and API-based integrations. • Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity. • Relevant certifications such as SC-300, OneLogin Professional, CISSP.

📌 Senior IAM Engineer (India)
🏢 Luxoft
📍 India