Systems Engineering Senior Specialist

Job Summary

The Identity Access Management (IAM) Engineer is responsible for designing, implementing, and maintaining secure authentication and authorization solutions across the enterprise. This role focuses on Microsoft Entra ID (Azure AD), Multi-Factor Authentication (MFA), Single Sign-On (SSO) integrations, and API-based identity automation. The engineer ensures secure, seamless access to applications while strengthening the organization's Zero Trust posture in Noida.

Key Responsibilities

• Microsoft Entra ID (Azure AD) Administration: Manage and optimize Entra ID tenants, identity governance, and lifecycle workflows; Configure Conditional Access, Identity Protection, PIM, and authentication policies; Implement and maintain Entra ID Connect, cloud sync, and federation configurations; Monitor identity security posture using Entra ID security tools and logs.
• MFA Authentication Security: Deploy and manage MFA solutions (Microsoft Authenticator, FIDO2, SMS/Voice, etc.); Enforce adaptive MFA policies aligned with Zero Trust principles; Troubleshoot MFA failures, token issues, and authentication flow problems; Evaluate and implement passwordless authentication strategies.
• Single Sign-On (SSO) Integrations: Integrate enterprise and SaaS applications using SAML, OAuth2, OIDC, and WS-Federation; Configure enterprise app registrations, service principals, and consent policies; Maintain SSO certificates, token lifetimes, and application access policies; Work with vendors to onboard new applications into SSO.
• API Automation: Develop and maintain automation using Microsoft Graph API, PowerShell, and REST APIs; Build workflows for user provisioning, deprovisioning, and access governance; Automate identity reporting, auditing, and compliance tasks; Integrate identity services with ITSM tools (ServiceNow, Jira, etc.).
• Security, Compliance Governance: Implement identity governance (IGA) controls: access reviews, entitlement management, lifecycle workflows; Ensure compliance with internal security standards and external regulations (ISO, SOC2, GDPR); Conduct periodic audits of roles, permissions, and privileged access; Collaborate with cybersecurity teams on incident response and threat mitigation.
• Troubleshooting Support: Provide L3 support for authentication, SSO, and identity-related incidents; Analyze logs from Entra ID, Graph API, and SIEM tools to resolve issues; Document solutions, runbooks, and architectural diagrams.

Required Skills Experience

Technical Skills

• Microsoft Entra ID (Azure AD)
• MFA, SSO, Conditional Access, Identity Protection
• SAML 2.0, OAuth2, OpenID Connect, WS-Federation
• PowerShell, Microsoft Graph API, REST APIs
• Zero Trust, identity governance, and privileged access management
• Active Directory, DNS, certificates, and federation services (ADFS)

Soft Skills

• Strong analytical and problem-solving abilities
• Excellent communication and documentation skills
• Ability to collaborate with cross-functional teams
• Ownership mindset and attention to detail

Preferred Qualifications

• Microsoft certifications (SC300, AZ-104, AZ-500, MS-100/MS-101)
• Experience with Entra ID Governance, SailPoint, Okta, or similar IAM tools
• Background in cybersecurity or cloud security engineering