IAM​/IGA Engineer

Location: Bengaluru

Location:

Godrej Centre, 8th Floor, Old Madras Road, Binnamangala, Mahadevapura Hobli, Bengaluru

Role Overview
The IAM/IGA Engineer is responsible for designing, implementing, supporting, and maintaining identity security solutions that ensure secure access to enterprise resources. This role focuses on identity lifecycle management, privileged access management, and governance processes across hybrid environments. Level 3 Engineering and Support escalations will also be handled by this position.

Key Responsibilities
Identity Lifecycle Management
Implement and manage provisioning, de-provisioning, and access certification processes.
Support joiner/mover/leaver workflows and self-service access requests.
Authentication & Authorization
Configure and maintain Entra  (Azure AD) for hybrid identity scenarios.
Manage on-prem Active Directory and integrate with cloud identity solutions.
Develop and enforce Conditional Access Policies and MFA strategies.
Identity Governance
Deploy and manage Saviynt IGA for access governance, risk analytics, and compliance.
Standardize identity governance across applications and business processes.
Privileged Access Management
Implement and maintain Cyber Ark for vaulting, password rotation, and privileged session management.
Ensure compliance with least privilege principles and break-glass account policies.
Automation & Integration
Develop Power Shell scripts for user provisioning, group management, and automation tasks.
Integrate IAM workflows with Service Now for access requests and approvals.
Security & Compliance
Conduct regular access reviews and entitlement certifications.
Ensure adherence to IAM standards and regulatory requirements.
Support & Engineering
Assist in resolving escalated support tickets that get routed to the IAM/IGA support queues.
Engineer and support identity object hygiene and cleanup efforts across AD/AAD.
Special Projects
Support special projects that need IAM/IGA engineering resources.
Review and update design and support documentation.

Required Skills & Experience
Strong knowledge of Entra  (Azure AD) and hybrid identity management.
Hands-on experience with on-prem Active Directory administration.
Expertise in Saviynt IGA platform for identity governance.
Proficiency in Cyber Ark for privileged access management.
Familiarity with Service Now for IAM workflow integration.
Advanced scripting skills in XML, JSON, APIs, and Power Shell for automation.
Understanding of RBAC, ABAC, and least privilege principles.

Experience with compliance frameworks and audit processes.
Proficiency at creating/reviewing/updating documentation and support articles.

Preferred Qualifications

Certifications:

Microsoft Certified - Identity and Access Administrator, Cyber Ark Defender, Saviynt Certified Professional.
5+ years of IAM/IGA experience in large-scale enterprise environments with complex identity ecosystems.