IAM Engineer

Luxoft; Bengaluru; On-site; INR 2,200,000 - 3,800,000; Full time

Job summary

Luxoft in Bengaluru seeks a Senior Identity & Access Management Engineer with 8–10 years of hands‑on IAM experience. You will design custom SSO solutions, implement integrations with OneLogin and Entra ID, and craft secure authentication flows, MFA, and device trust models. Strong scripting and threat-modeling skills are essential.

Join a security‑minded team, collaborate across engineering and security, and drive identity lifecycle improvements in a fast‑paced environment.

Qualifications

• 8–10 years of IAM engineering experience.
• Strong hands‑on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.
• Solid infra and dev background incl TLS / cert lifecycle, DNS, reverse proxies, and load balancers.
• Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID.
• Strong scripting: Python, PowerShell, Bash.
• Experience with custom IAM solution development (APIs, SDKs, identity workflows).
• Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.
• Excellent oral and written communication skills.
• Ability to work cross‑functionally and explain complex issues clearly.
• Strong analytical and problem‑solving skills.
• Strong documentation and presentation abilities.

Responsibilities

• Design and develop custom SSO/identity broker solutions, including non‑standard authentication flows and legacy app integrations.
• Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
• Deep, protocol‑level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers.
• Design and implementation of custom MFA and risk‑based authentication flows.
• Experience with FIDO2 / WebAuthn, certificate‑based authentication, or device trust models.
• Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.
• Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.
• Ability to perform authentication and authorization threat modeling.
• Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).

Skills

SSO

OIDC

OAuth2

SAML

MFA

AuthID

Entra ID

Python

PowerShell

Shell scripting

TLS/certificate management

Threat modeling

APIs/SDKs

SCIM

JWT

Conditional access

Identity lifecycle

Documentation

Tools

OneLogin

Microsoft Entra ID

Job description

We are seeking a highly skilled Senior Identity & Access Management (IAM) Engineer with 8–10 years of hands‑on experience. The candidate must possess strong expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID.

Responsibilities:

• Design and develop custom SSO/identity broker solutions, including non‑standard authentication flows and legacy app integrations
• Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
• Deep, protocol‑level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers
• Design and implementation of custom MFA and risk‑based authentication flows.
• Experience with FIDO2 / WebAuthn, certificate‑based authentication, or device trust models
• Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.
• Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.
• Ability to perform authentication and authorization threat modeling
• Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).

Mandatory Skills Description:

• 8–10 years of IAM engineering experience.
• Strong hands‑on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.
• Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers
• Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID.
• Strong scripting experience (Python, PowerShell, Bash).
• Experience with custom IAM solution development (APIs, SDKs, identity workflows).
• Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.
• Excellent oral and written communication skills.
• Ability to work cross‑functionally and explain complex issues in simple terms.
• Strong analytical and problem‑solving skills.
• Strong documentation and presentation abilities

Nice‑to‑Have Skills Description:

• Experience with OneLogin mappings, policies, and API‑based integrations.
• Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity.
• Relevant certifications such as SC-300, OneLogin Professional, CISSP.