Project Description

We are seeking a highly skilled Senior Identity & Access Management (IAM) Engineer with 8–10 years of hands-on experience. The candidate must possess strong expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID.

Responsibilities

- Design and develop custom SSO/identity broker solutions, including non‐standard authentication flows and legacy app integrations - Design, implement, and maintain SSO integrations using OneLogin and Entra ID. - Deep, protocol‐level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers - Design and implementation of custom MFA and risk‐based authentication flows. - Experience with FIDO2 / WebAuthn, certificate‐based authentication, or device trust models - Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting. - Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation. - Ability to perform authentication and authorization threat modeling - Collaborate with engineering, application,



and security teams as the IAM subject matter expert (SME).

Mandatory Skills Description

- 8–10 years of IAM engineering experience. - Strong hands-on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA. - Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers - Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID. - Strong scripting experience (Python, PowerShell, Bash). - Experience with custom IAM solution development (APIs, SDKs, identity workflows). - Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management. - Excellent oral and written communication skills. - Ability to work cross-functionally and explain complex issues in simple terms. - Strong analytical and problem-solving skills. - Strong documentation and presentation abilities

Nice-to-Have Skills Description:

- Experience with OneLogin mappings, policies, and API-based integrations. - Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity. - Relevant certifications such as SC-300, OneLogin Qualified, CISSP.

📌 IAM Engineer (Bengaluru)
🏢 Luxoft
📍 Bengaluru