IT & Compliance Engineer

IT & Compliance Engineer

About the Role
Were building out our security and compliance function, and this role owns the identity, IT, and compliance-evidence backbone the rest of the program runs on. Youll own how people and systems get access, how that access is reviewed and proven, and how we keep our SOC 2 program continuously audit-ready.
If youre the kind of engineer who makes access clean, least-privilege, and defensible and can produce evidence an auditor trusts without hand-holding this is your role.

Employment Type: Full-time

Location: Indore (Work from Office)

Key Responsibilities

• Own identity and access management (IAM) end to end, including user and service-account lifecycle management (joiner, mover, leaver), least-privilege enforcement, MFA, key and credential hygiene, and access to cloud and SaaS systems.

• Conduct periodic access reviews across cloud, SaaS, and internal systems, and produce audit-ready evidence demonstrating completion.

• Own corporate IT, including endpoint management, SSO and identity-provider administration, and secure onboarding and offboarding processes.

• Maintain SOC 2 compliance by managing control evidence, keeping the compliance automation platform current, and supporting internal and external audits.

• Maintain the control ownership matrix, ensuring it stays accurate as the environment evolves.

• Independently review third-party and vendor access, ensuring objective and compliant access governance.

• Partner with Security and Engineering teams to remediate or document identity- and access-related findings according to established processes.

Required Skills & Experience

• Strong hands-on experience with IAM, including identity lifecycle management, least-privilege enforcement, MFA, federation, SSO, and key and credential management.

• Proven experience supporting or maintaining a SOC 2 Type II compliance program, including ownership of control evidence and participation in audits.

• Experience conducting access reviews and recertification cycles, with sound judgment when approving or revoking access.

• Hands-on experience managing corporate IT, including endpoint management, SSO, and employee onboarding and offboarding.

• Strong understanding of cloud infrastructure, with hands-on or working knowledge of AWS and Azure preferred.

• Excellent written communication skills, with the ability to produce clear, accurate, and audit-ready documentation.

• Strong sense of integrity and objectivity when reviewing access permissions and compliance requirements.

Preferred Qualifications

• 4+ years of experience in Identity & Access Management, IT, Security Operations, or Compliance Engineering.

• Experience with compliance automation platforms such as Vanta, Drata, Secureframe, or similar tools.

• Hands-on experience with identity providers such as Okta, Microsoft Entra ID, or AWS IAM Identity Center.

• Familiarity with AWS IAM and cloud access management models.

• AWS certification, preferably Solutions Architect Associate, or willingness to obtain one within 90 days.

• Relevant certifications such as CISA, ISC2 SSCP/CC, or CompTIA Security+.

• Exposure to GDPR or other privacy and regulatory compliance frameworks.

Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.