IAM Technical Lead / Senior IAM Engineer in Hyderabad, India

This role is for one of Weekday’s clients
Salary range: Rs 3000000 - Rs 5000000 (ie INR 30 - 50 LPA)

Min Experience: 10+ years
Location: Hyderabad, Telangana, India
JobType: full-time

We are seeking an experienced IAM Technical Lead / Senior IAM Engineer to design, engineer, enhance, and integrate enterprise Identity and Access Management (IAM) and Customer Identity and Access Management (CIAM) capabilities across cloud and on-premises environments.

The role will focus on delivering secure, resilient, scalable, and automation-driven identity solutions across platforms such as Okta, Auth0, and Microsoft Entra ID . The ideal candidate will have strong expertise in Zero Trust, authentication and authorization, identity lifecycle management, Conditional Access, federation, and application integration.

This is an engineering-focused role involving close collaboration with IAM architects, product owners, cybersecurity teams, application teams, and technology partners.

Requirements

Key Responsibilities

IAM & CIAM Engineering

• Design, develop, and enhance enterprise Workforce IAM and CIAM solutions using Okta, Auth0, Okta Access Gateway, and Microsoft Entra ID.
• Engineer secure authentication and authorization solutions supporting Zero Trust, MFA, passwordless authentication, adaptive access, privileged access, and customer identity journeys.
• Design and implement federation and identity integration patterns using SAML 2.0, OAuth 2.0, OpenID Connect, and SCIM .
• Develop identity lifecycle and access management models for employees, partners, customers, and other external users.
• Design CIAM journeys covering customer registration, authentication, profile management, consent, and account lifecycle.
• Ensure IAM solutions follow security, privacy, regulatory, and organizational standards.

CIAM & Customer Identity

• Design and implement scalable CIAM architectures using Auth0 for customer-facing applications and digital platforms.
• Develop secure customer authentication flows involving social identity providers, progressive profiling, step-up authentication, and risk-aware access controls.
• Partner with application and digital product teams to integrate customer identity capabilities with applications, APIs, and platforms.
• Establish CIAM patterns that balance security, regulatory compliance, privacy, and customer experience.
• Ensure appropriate controls for consent management, data minimization, and customer data protection.

Conditional Access & Zero Trust

• Design, implement, and continuously improve Microsoft Entra Conditional Access policies aligned with Zero Trust principles.
• Develop scalable access-control patterns for workforce users, privileged accounts, devices, applications, and workload identities.
• Implement automation for policy validation, deployment, monitoring, and configuration management.
• Collaborate with security and architecture teams to strengthen identity-based security controls and Zero Trust strategies.

Platform Engineering & Automation

• Develop IAM automation using APIs, SDKs, scripting, and configuration-as-code approaches.
• Support CI/CD pipelines and controlled deployment of IAM, CIAM, and Conditional Access configurations across environments.
• Drive platform upgrades, new feature adoption, and technical debt reduction across identity platforms.
• Identify and implement engineering improvements that enhance platform security, reliability, scalability, and operational efficiency.

Application & Cloud Integration

• Partner with application teams to design and implement secure IAM and CIAM integrations for SaaS, cloud, API-based, custom, and legacy applications.
• Lead IAM technical assessments for application onboarding, migrations, cloud transformations, and modernization initiatives.
• Validate identity architecture and integrations for security, performance, production readiness, and user experience.
• Resolve complex federation, authentication, authorization, and access challenges across hybrid and multi-tenant environments.

Security & Architecture

• Ensure IAM solutions comply with enterprise security policies, architecture standards, and regulatory requirements.
• Implement identity security controls based on least privilege, strong authentication, continuous access evaluation, and defense-in-depth principles.
• Provide technical input into security assessments, audits, risk reviews, and regulatory engagements.
• Contribute to threat modelling and security design decisions involving identity compromise, unauthorized access, customer fraud, and access abuse.

Technical Leadership

• Act as a senior technical authority for IAM engineering and provide technical direction to engineers and developers.
• Mentor IAM engineers and contribute to technical standards, development practices, and engineering excellence.
• Collaborate with architects and product owners to influence IAM platform roadmaps and solution strategies.
• Work with technology partners and vendors on advanced integrations, platform capabilities, and feature adoption.
• Provide engineering-level guidance during complex IAM incidents, escalations, and technical challenges.

Documentation & Continuous Improvement

• Maintain technical designs, integration standards, IAM/CIAM guidelines, architecture documentation, and engineering runbooks.
• Participate in post-implementation and post-incident reviews from a technical and architectural perspective.
• Continuously evaluate IAM technologies and industry practices to improve security posture, platform reliability, and developer experience.
• Support knowledge sharing and establish reusable engineering patterns across IAM initiatives.

Required Qualifications & Experience

• 10–12 years of overall experience in IAM, CIAM, cybersecurity engineering, or related technology domains.
• Extensive hands-on experience with enterprise IAM platforms in large-scale environments.
• Strong expertise in Okta and Microsoft Entra ID .
• Strong understanding of IAM architecture, authentication, authorization, identity lifecycle management, and access governance.
• Experience with Zero Trust architecture and identity-centric security models.
• Hands-on knowledge of SAML, OAuth, OpenID Connect, and SCIM.
• Experience developing integrations using APIs, scripting, or programming languages such as Java, .NET, Python, PowerShell, or JavaScript.
• Experience supporting cloud-first, SaaS, API-driven, and hybrid identity architectures.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent professional experience.

Good-to-Have Skills

• Experience with CIAM implementations and customer identity platforms.
• Strong hands-on experience with Auth0.
• Experience with OAuth-based application and API integrations.
• Exposure to Okta Access Gateway and related identity technologies.
• Experience with Conditional Access policy automation and governance.
• Knowledge of identity security, privileged access, and adaptive/risk-based authentication.
• Experience working in large, global, regulated enterprise environments.

Key Competencies

• Strong analytical and problem-solving abilities with a security-first mindset.
• Ability to communicate complex IAM architectures and technical concepts to technical and non-technical stakeholders.
• Strong stakeholder management, collaboration, and influencing skills.
• Ability to provide technical leadership while remaining hands-on.
• High level of ownership, accountability, and engineering discipline.
• Comfortable working across global teams and complex enterprise environments.

Must-Have Skills

• Okta
• Entra ID
• IAM

Good-to-Have Skills

• CIAM
• OAuth