IAM Engineer

Ameriprise-Financia; Dadri; Hybrid; INR 700,000 - 1,100,000; Full time

Job summary

Ameriprise India LLP is seeking an Azure IAM Engineer to design, implement, and support enterprise Identity and Access Management platforms. You will manage Entra ID, AD, and MFA, while integrating applications via SAML, OAuth 2.0, OIDC, and SCIM. The role requires scripting, automation, and participation in a 24x7 rotation.

You will collaborate with global teams and contribute to automation and modernization initiatives, ensuring platform reliability and security in a hybrid office model.

Qualifications

• Four plus years in Identity & Access Management or production support.
• Experience with Microsoft Entra ID (Azure AD), Active Directory, and Azure MFA.
• Strong scripting and automation using PowerShell, Python, or REST APIs.

Responsibilities

• Design, implement, and support IAM solutions centered on Entra ID and AD.
• Integrate applications using SAML, OAuth 2.0, OIDC, and SCIM provisioning.
• Provide L2/L3 production support and ensure high availability and SLA adherence.
• Develop automation to improve operational efficiency and CI/CD pipelines.

Skills

Microsoft Entra ID (Azure AD)

Active Directory

Azure MFA

Conditional Access

SSO & Federation

Identity Governance

SAML

OAuth 2.0

OpenID Connect

SCIM

PowerShell

Python

REST APIs

Education

Bachelor's degree in Computer Science / IT / Engineering

Tools

Azure DevOps

Jenkins

Bitbucket

GitHub

Ansible

Jira

Confluence

Job description

About Our CompanyAmeriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.Job DescriptionAzure IAM Engineer will be responsible for engineering, administration, automation, and operational support of enterprise Identity & Access Management platforms with a primary focus on Microsoft Entra ID (Azure AD), Active Directory, Azure MFA, SSO, Federation, and Identity Governance solutions. This role requires a strong DevOps mindset, automation expertise, and participation in a 24x7 rotational support model to ensure platform stability, security, and service availability.Key ResponsibilitiesDesign, implement, administer, and support enterprise IAM solutions centered around Microsoft Entra ID (Azure AD), Active Directory, Azure MFA, Conditional Access, and Identity Governance.Integrate applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM provisioning standards.Provide L2/L3 production support for IAM platforms, ensuring high availability and adherence to SLA commitments.Monitor platform health, analyze incidents, perform root cause analysis (RCA), and implement preventive measures.Support onboarding of applications to SSO, MFA, and modern authentication platforms.Develop and maintain automation solutions using PowerShell, Microsoft Graph API, Python, or REST APIs to improve operational efficiency.Manage and support Entra ID lifecycle activities, authentication policies, Conditional Access policies, and access governance processes.Participate in incident, problem, change, and release management activities.Perform system health checks, trend analysis, capacity planning, and platform optimization.Collaborate with infrastructure, security, network, cloud, and application teams to resolve complex IAM issues.Support disaster recovery testing, resiliency exercises, and operational readiness activities.Contribute to CI/CD implementation and infrastructure automation initiatives.Create and maintain technical documentation, operational runbooks, SOPs, and knowledge articles.Participate in a 24x7 rotational shift model, including weekends and off-hours support when required.Drive continuous improvement initiatives and identify opportunities for automation and modernization within IAM services.Work closely with global onsite and offshore teams to deliver secure and scalable identity solutions.Required QualificationsBachelor's degree in Computer Science, Information Technology, Engineering, or related discipline.2-4 years of experience in Identity & Access Management and Production Support environments.Hands-on experience with: Microsoft Entra ID (Azure AD) Active Directory Azure MFA Conditional Access SSO & Federation Technologies Identity Governance & Lifecycle ManagementStrong understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.Experience troubleshooting authentication, authorization, and identity federation issues.Strong scripting and automation experience using PowerShell, Python, or REST APIs.Experience supporting critical enterprise platforms in a 24x7 environment.Excellent analytical, troubleshooting, and problem-solving skills.Strong verbal and written communication skills.Willingness to work in rotational shifts and global support model.Preferred QualificationsExperience with Microsoft Entra ID Governance, Access Reviews, Entitlement Management, and Privileged Identity Management (PIM).Experience with DevOps and CI/CD tools including Azure DevOps, Jenkins, Bitbucket, GitHub, Ansible, Jira, and Confluence.Experience with monitoring and observability tools such as Dynatrace, ScienceLogic, SiteScope, CA APM (Wily), Azure Monitor, and Sumo Logic.Exposure to cloud platforms including Microsoft Azure and AWS.Good understanding of containers and orchestration technologies such as Docker and Kubernetes.Exposure to IIS, Tomcat, and modern application architectures.Experience supporting large-scale enterprise IAM environments and cloud identity transformations.Knowledge of Zero Trust Security principles and modern authentication frameworks.In-Office CollaborationWe are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.Full-Time/Part-TimeFull timeTimings(4:45p-1:15a)India Business UnitAWMPO AWMP&S President's OfficeJob Family GroupTechnologyAmeriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.