Senior CIAM Engineer

Role : Senior CIAM Engineer

Experience Range : 5- 8 Years

Location : Hyderabad

Role Overview :

We are seeking an experienced Senior IAM Engineer to join our team, responsible for designing, implementing, and managing Identity and Access Management solutions. In this role, you will work with various IAM technologies, including OAuth, OIDC, SAML, and Okta, integrating IAM platforms, and ensuring secure access management across enterprise applications. The ideal candidate will possess strong expertise in cloud IAM (AWS / Azure), API integrations, security best practices, and software development Skills :

Authentication & Authorization :

• Deep expertise in Auth0, OAuth 2.0, OpenID Connect (OIDC), and SAML.
• Hands-on experience with Okta for identity and access management.

Troubleshooting & Debugging :

Strong troubleshooting skills, able to analyze logs and resolve authentication / authorization issues.

Experience troubleshooting SAML assertions, OAuth tokens, and API integrations.

IAM or CIAM :

Extensive experience with Identity and Access Management (IAM) and Customer Identity Access Management (CIAM) solutions.

Proficient in managing user lifecycles, and implementing RBAC (Role-Based Access Control) and ABAC (Attribute-Based Access Control).

Security & Compliance :

Strong understanding of IAM security best practices and standards.

Familiar with IAM policies, compliance requirements, and governance frameworks.

API Integration & Development :

Experience in integrating IAM solutions with REST APIs, handling security tokens and JSON.

Familiar with IAM-related API integrations.

Cloud IAM :

Expertise in AWS or Microsoft Azure or Google Cloud Platform, including managing cloud-based IAM policies and configurations.

Coding & Development :

Knowledge of Java or .NET, particularly in relation to IAM integration and authentication-related development.

Ability to read, debug, and troubleshoot application code for IAM-related Skills :

Experience with Federation Services (e.g., ADFS, Ping Identity, ForgeRock).

Exposure to Privileged Access Management (PAM) solutions.

Understanding of Zero Trust Security Models.

Familiarity with DevSecOps Responsibilities :

Manage IAM projects, ensuring secure authentication and access control across various applications and platforms.

Design, implement, and maintain IAM solutions, leveraging protocols such as Auth0, OAuth 2.0, OpenID Connect (OIDC), and SAML.

Integrate IAM solutions (including Okta, AWS Cognito, Azure AD) with enterprise and cloud-based applications.

Troubleshoot and resolve IAM-related issues, including authentication / authorization failures, SAML assertions, OAuth token issues, and API integration errors.

Manage user lifecycles, configure Role-Based Access Control (RBAC), and Attribute-Based Access Control

(ABAC) policies.

Collaborate with development teams to implement secure coding practices related to IAM.

Work closely with the security team to enforce IAM security best practices, compliance, and governance.

Participate in the continuous improvement of IAM processes, integrating new technologies and keeping up

with industry trends.

Maintain knowledge of IAM policies, compliance standards, and governance Qualifications :

Education : Bachelor's or Masters degree in Computer Science, Cybersecurity, or a related field.

Certifications (Preferred) :

CISSP (Certified Information Systems Security Professional).

CIAM (Customer Identity and Access Management) Certification.

Okta Certified Professional.

AWS Certified Security Specialty.

Microsoft Identity & Access Attributes :

Willingness to learn and adapt to new IAM technologies and practices.

Strong problem-solving skills and the ability to work in a fast-paced, dynamic environment.

Excellent collaboration and communication skills to work effectively with security and

Excellent collaboration and communication skills to work effectively with security and development teams.

Skills Required :

CIAM

Auth0 / Forgerock / Okta / OneLogin / Ping Identity

AWS

EntraID

SAML

OIDC

OAuth

GIT / Devops.

Any scripting language knowledge is a plus.

(ref : hirist.tech)