IAM Engineer

Ameriprise Financial Services; Dadri; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Ameriprise India LLP is seeking an Azure IAM Engineer to design, implement, and run enterprise IAM solutions focused on Microsoft Entra ID, AD, and related security controls.

You will integrate applications with SAML/OIDC/OAuth, automate with PowerShell/Python, and provide 24x7 support in a global team, with on-site collaboration in India.

Qualifications

• 2-4 years in Identity & Access Management and production support.
• Hands-on with Microsoft Entra ID, Active Directory, Azure MFA, CA, SSO & Federation.
• Strong knowledge of SAML, OAuth 2.0, OIDC, SCIM; scripting in PowerShell/Python/REST.

Responsibilities

• Design, implement, and support IAM solutions centered on Entra ID and AD.
• Integrate apps using SAML, OAuth, OIDC, and SCIM provisioning.
• Provide L2/L3 production support in a 24x7 environment.
• Develop automation to improve runbooks and throughput.
• Collaborate across infra, security, cloud, and app teams to resolve IAM issues.
• Participate in incident, change, and release management.

Skills

Azure Entra ID (Azure AD)

Active Directory

Azure MFA

Conditional Access

SSO & Federation

Identity Governance

SCIM

SAML

OAuth 2.0

OIDC

PowerShell

Python

REST APIs

DevOps mindset

Education

Bachelor's degree in Computer Science/IT/Engineering

Tools

Azure DevOps

Jenkins

Bitbucket

GitHub

Ansible

Jira

Confluence

Dynatrace

Azure Monitor

Kubernetes

Docker

IIS/Tomcat

SCIM tooling

Job description

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.

Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Job Description

Azure IAM Engineer will be responsible for engineering, administration, automation, and operational support of enterprise Identity & Access Management platforms with a primary focus on Microsoft Entra ID (Azure AD), Active Directory, Azure MFA, SSO, Federation, and Identity Governance solutions. This role requires a strong DevOps mindset, automation expertise, and participation in a 24x7 rotational support model to ensure platform stability, security, and service availability.

Key Responsibilities

• Design, implement, administer, and support enterprise IAM solutions centered around Microsoft Entra ID (Azure AD), Active Directory, Azure MFA, Conditional Access, and Identity Governance.
• Integrate applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM provisioning standards.
• Provide L2/L3 production support for IAM platforms, ensuring high availability and adherence to SLA commitments.
• Monitor platform health, analyze incidents, perform root cause analysis (RCA), and implement preventive measures.
• Support onboarding of applications to SSO, MFA, and modern authentication platforms.
• Develop and maintain automation solutions using PowerShell, Microsoft Graph API, Python, or REST APIs to improve operational efficiency.
• Manage and support Entra ID lifecycle activities, authentication policies, Conditional Access policies, and access governance processes.
• Participate in incident, problem, change, and release management activities.
• Perform system health checks, trend analysis, capacity planning, and platform optimization.
• Collaborate with infrastructure, security, network, cloud, and application teams to resolve complex IAM issues.
• Support disaster recovery testing, resiliency exercises, and operational readiness activities.
• Contribute to CI/CD implementation and infrastructure automation initiatives.
• Create and maintain technical documentation, operational runbooks, SOPs, and knowledge articles.
• Participate in a 24x7 rotational shift model, including weekends and off-hours support when required.
• Drive continuous improvement initiatives and identify opportunities for automation and modernization within IAM services.
• Work closely with global onsite and offshore teams to deliver secure and scalable identity solutions.

Required Qualifications

• Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline.
• 2-4 years of experience in Identity & Access Management and Production Support environments.
• Hands-on experience with: Microsoft Entra ID (Azure AD) Active Directory Azure MFA Conditional Access SSO & Federation Technologies Identity Governance & Lifecycle Management
• Strong understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM.
• Experience troubleshooting authentication, authorization, and identity federation issues.
• Strong scripting and automation experience using PowerShell, Python, or REST APIs.
• Experience supporting critical enterprise platforms in a 24x7 environment.
• Excellent analytical, troubleshooting, and problem-solving skills.
• Strong verbal and written communication skills.
• Willingness to work in rotational shifts and global support model.

Preferred Qualifications

• Experience with Microsoft Entra ID Governance, Access Reviews, Entitlement Management, and Privileged Identity Management (PIM).
• Experience with DevOps and CI/CD tools including Azure DevOps, Jenkins, Bitbucket, GitHub, Ansible, Jira, and Confluence.
• Experience with monitoring and observability tools such as Dynatrace, ScienceLogic, SiteScope, CA APM (Wily), Azure Monitor, and Sumo Logic.
• Exposure to cloud platforms including Microsoft Azure and AWS.
• Good understanding of containers and orchestration technologies such as Docker and Kubernetes.
• Exposure to IIS, Tomcat, and modern application architectures.
• Experience supporting large-scale enterprise IAM environments and cloud identity transformations.
• Knowledge of Zero Trust Security principles and modern authentication frameworks.
  

In-Office Collaboration

We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Full-Time/Part-Time

Full time

Timings

(4:45p-1:15a)

India Business Unit

AWMPO AWMP&S President's Office

Job Family Group

Technology

Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.

We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.