Project Description:

nWe are seeking a highly skilled Senior Identity & Access Management (IAM) Engineer with 8–10 years of hands-on experience. The candidate must possess solid expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID.

nResponsibilities:

n

n
Design and develop custom SSO/identity broker solutions, including non‐standard authentication flows and legacy app integrations
n
Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
n
Deep, protocol‐level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers
n
Design and implementation of custom MFA and risk‐based authentication flows.
n
Experience with FIDO2 / WebAuthn, certificate‐based authentication, or device trust models
n
Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.
n
Solid understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.
n
Ability to perform authentication and authorization threat modeling
n
Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).




n

nMandatory Skills Description:

n

n
8–10 years of IAM engineering experience.
n
Robust hands-on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.
n
Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers
n
Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID.
n
Strong scripting experience (Python, PowerShell, Bash).
n
Experience with custom IAM solution development (APIs, SDKs, identity workflows).
n
Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.
n
Excellent oral and written communication skills.
n
Ability to work cross-functionally and explain complex issues in simple terms.
n
Strong analytical and problem-solving skills.
n
Strong documentation and presentation abilities
n

nNice-to-Have Skills Description:

n

n
Experience with OneLogin mappings, policies, and API-based integrations.
n
Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity.
n
Relevant certifications such as SC-300, OneLogin Professional, CISSP.
n

📌 Iam Engineer Bengaluru
🏢 Luxoft
📍 Bengaluru