Identity & Access Engineer Senior

Company Name New Vision Softcom & Consultancy Pvt. Ltd

Function Business Units (BU)

Department/Practice IT-IS

Organization Unit IT-IS

Region USA

Country USA

Base office location USA

Working model Remote

Weekly Off US Holiday Calendar

State USA

Identity and access management SailPoint IIQ Infrastructure Cloud

Graduation/Equivalent Course

Job Title: Identity and Access Management (IAM) Senior Engineer

Role/

Job Summary:

We are looking for an Identity and Access Management (IAM) Senior Engineer to act as the senior technical owner of enterprise identity platforms. The role requires deep hands-on expertise in SailPoint Identity Governance and Administration (IGA) and Microsoft Entra , and the ability to design and lead secure, scalable identity solutions across workforce, customer and cloud environments that meet business, security and compliance requirements.

Key Responsibilities:

• Advanced IAM engineering:Design and implement advanced IAM solutions across workforce and customer identity platforms, optimize identity lifecycle workflows, and enforce least-privilege, policy-driven access models.
• Microsoft Entra :Administer and engineer Entra s multiple geographies, covering users, groups, applications, service principals, Conditional Access, Multi-Factor Authentication (MFA), identity protection, session controls, enterprise applications and consent governance.
• Cloud tenant setup:Stand up, configure and document cloud tenants for multi-regional business areas and regional compliance needs, including network connectivity, authentication, authorization and SailPoint integration.
• Hybrid identity and governance:Partner with security, infrastructure and application teams on hybrid identity, directory synchronization, privileged access, access reviews and audit-ready entitlement governance, and monitor sign-in activity, risky access patterns and identity health.
• SailPoint IGA leadership:Lead SailPoint implementations and enhancements, including complex provisioning logic, role engineering, access models, certification campaign design, and troubleshooting of complex SailPoint and connector issues.
• Customer Identity and Access Management (CIAM) and federation:Design and support CIAM architectures, including external identity federation with Entra  Okta and secure customer authentication and authorization flows, keeping controls consistent with workforce IAM.
• Non-human and AI identity:Design and secure frameworks for service principals, workloads, automation and AI-driven identities, with appropriate controls and governance over machine and AI access.
• Architecture and design ownership:Create and maintain reference architectures, technical design documents, integration standards and reusable engineering standards for SailPoint, Entra , CIAM, cloud tenants, federation and identity automation, documenting decisions, risks, assumptions and dependencies.
• Technical decision-making:Recommend platform direction and control patterns, evaluate technical risks and tradeoffs, and influence engineering teams, application owners, security stakeholders and audit partners with clear, defensible guidance.
• Audit, compliance and risk:Own the IAM audit evidence strategy (traceable access decisions and repeatable evidence collection) and map IAM controls to SOC 2 (System and Organization Controls
  2), ISO/IEC 27001, CMMC (Cybersecurity Maturity Model Certification) and internal policy requirements.
• CI/CD (Continuous Integration / Continuous Delivery) and Infrastructure as Code (IaC):Deliver IAM controls, SailPoint configurations and cloud tenant changes through source-controlled Dev Ops pipelines and IaC for consistent, repeatable and secure delivery.
• Incident escalation:Lead diagnosis…