Senior Identity and Access Management; IAM Engineer

Position: Senior Identity and Access Management (IAM) Engineer
Company

Description:

Guardant Health is a leading precision oncology company focused on helping conquer cancer globally through use of its proprietary tests, vast data sets and advanced analytics. The Guardant Health oncology platform leverages capabilities to drive commercial adoption, improve patient clinical outcomes and lower healthcare costs across all stages of the cancer care continuum. Guardant Health has commercially launched Guardant
360®, Guardant
360 CDx, Guardant
360 Tissue Next™, Guardant
360 Response™, and Guardant

OMNI® tests for advanced stage cancer patients, and Guardant Reveal™ for early-stage cancer patients. The Guardant Health screening portfolio, including the Shield™ test, aims to address the needs of individuals eligible for cancer screening.

Job Description

Position Title:

Senior Identity and Access Management (IAM) Engineer

Location:

Hyderabad, India

Job Type: Full-Time

Position Overview:

Guardant Health is seeking an experienced and highly motivated Senior Identity and Access Management (IAM) Engineer to join our IT Infrastructure and Security Engineering team in Hyderabad, India. This role is crucial to the design, implementation, and continuous improvement of our enterprise IAM platforms enabling secure, efficient, and scalable access management across the organization. The ideal candidate brings deep domain knowledge in identity principles, cloud and on-prem directory services, automation workflows, and modern authentication protocols.

In this role, you will work with key technologies including Okta, Active Directory, Entra , AWS IAM, PKI, and support integrations with healthcare-focused enterprise access systems. You will also drive automation efforts through Okta Workflows and custom integrations using Okta APIs, AD, and Microsoft Graph API.

Key Responsibilities:

Identity Architecture & Governance

● Design and maintain secure, policy-driven IAM architecture supporting workforce and application access across cloud and hybrid environments.

● Define and enforce least privilege access models, lifecycle processes, and compliance standards. Platform Ownership & Integration.

● Administer and optimize Okta, Active Directory, Entra  (Azure AD), and AWS IAM environments including federation, EAM, SSO, and MFA configurations.

● Support and operate PKI solutions, including Digi Cert, Microsoft ADCS, and AWS Private CA.

● Ensure smooth operation of SCEP-based certificate provisioning for managed devices and systems. Workflow Automation & API Integration.

● Develop and maintain Okta Workflows for identity lifecycle automation, approvals, and policy enforcement.

● Integrate identity processes with third-party systems using Okta APIs, Microsoft Graph API, and custom scripts (Power Shell, Python, etc.).

● Continuously identify opportunities to automate repetitive tasks and improve operational efficiency with Power Shell, Python, Terraform. Privileged Access & Endpoint Identity.

● Implement and manage Privileged Access Management (PAM) tools and practices across critical infrastructure.

● Support integrations with EAM (Imprivata) or other clinical/workforce access systems used in the Guardant Health environments. Monitoring, Compliance, and Documentation.

● Monitor IAM systems for anomalies and ensure timely response to incidents or alerts.

● Ensure alignment with security standards such as HIPAA, SOX, and ISO 27001.

● Maintain detailed documentation, architecture diagrams, and standard operating procedures in Confluence or equivalent.

Qualifications

● 7+ years of hands-on experience in enterprise IAM engineering roles.

● Expertise in Okta administration, workflow automation, and integration via Okta APIs.

● Experience with Microsoft Graph API and automation scripting (Power Shell, Python).

● Strong background in Active Directory, Entra , Okta, and AWS IAM management.

● Deep understanding of identity standards and protocols: SAML, OAuth
2.0, OIDC, Kerberos, LDAP, SCIM, SCEP.

● Hands-on experience with PKI, including Digi Cert, Microsoft PKI, AWS PCA, and SCEP-based and ACME-based certs provisioning.

● Familiarity with Privileged Access Management tools (Cyber Ark, Beyond Trust, Okta etc.)

● Experience with Imprivata or similar enterprise access platforms is a strong plus.

● Relevant certifications such as CIAM, Okta Certified Professional, or Microsoft Identity and Access Administrator are highly desirable.

● Excellent communication, problem-solving, and cross-team collaboration skills.