IAM (Identity & Access Management) Engineer (Okta / SailPoint)

Zoho; India; Remote; INR 1,700,000 - 2,600,000; Part time

Job summary

Zoho is seeking an experienced IAM Engineer to design, configure, and secure our global identity and access governance footprint. The ideal candidate will orchestrate complex lifecycle management pathways, configure secure single sign-on integrations, build automated user provisioning workflows, and enforce strict zero-trust boundary guidelines across cloud and on-premise application matrices.

We require 4–8 years in IT security with 3+ dedicated years in Okta or SailPoint environments, plus

Qualifications

• 4 to 8 years of IT security experience.
• 3+ years actively designing, building, and deploying software within Okta or SailPoint environments.
• Okta Certified Professional/Consultant OR SailPoint Certified IdentityNow/IdentityIQ Engineer.

Responsibilities

• Configure and deploy core IAM framework modules, managing user onboarding pipelines and access certification campaigns.
• Design and maintain Single Sign-On configurations with SAML 2.0 / OIDC profiles and OAuth parameters.
• Build automated provisioning workflows with API connectors for directory feeds (AD, HR systems).
• Implement adaptive MFA policies with context-aware security profiles and geofencing metrics.
• Govern RBAC and ABAC for least-privilege access across systems.
• Collaborate with enterprise infrastructure teams to support secure connectivity to endpoints and SaaS apps.
• Lead update regression validations and patch cycles to prevent auth processing drops.

Skills

SAML

OIDC

OAuth

LDAP

Active Directory

SCIM

MFA

RBAC

ABAC

Zero-trust

Tools

Okta

SailPoint

Job description

IAM (Identity & Access Management) Engineer (Okta / SailPoint)

IAM (Identity & Access Management) Engineer (Okta / SailPoint)

• Employment Type: Contract
  
• Work Mode: Remote
  
• Location: Offshore
  
• Total Experience Required: 4 to 8 years
  
• Relevant Experience Required: 3+ years of dedicated implementation and configuration experience across enterprise IAM platforms ( Okta or SailPoint )
  
• Mandatory Certification: Okta Certified Professional/Consultant or SailPoint Certified IdentityNow Engineer
  

Job Summary

We are seeking an experienced IAM Engineer to design, configure, and secure our global identity and access governance footprint. The ideal candidate will orchestrate complex lifecycle management pathways, configure secure single sign-on integrations, build automated user provisioning workflows, and enforce strict zero-trust boundary guidelines across cloud and on-premise application matrices.

Key Responsibilities

• Configure and deploy core IAM framework modules, managing user onboarding pipelines, automated lifecycle states, and access certification governance campaigns.
  
• Design and maintain Single Sign-On (SSO) configurations, setting up federated cross-app connections, custom SAML 2.0 / OpenID Connect (OIDC) profiles, and OAuth authorization parameters.
  
• Build automated provisioning workflows, writing system rules, attribute transformations, and direct API connector scripts to manage directory feeds (Active Directory, HR systems).
  
• Implement adaptive Multi-Factor Authentication (MFA) policies, configuring context-aware security profiles, network geofencing metrics, and sign-on threshold parameters.
  
• Govern identity security and access access levels, structuring complex role-based access control (RBAC), attribute-based access control (ABAC), and least-privilege security lines.
  
• Collaborate with enterprise infrastructure teams to support secure connectivity with directory endpoints, internal databases, and downstream SaaS application rings.
  
• Lead update regression validations and patch cycles, auditing platform custom configurations across sandboxes to prevent authentication processing drops.
  

Requirements

• 4 to 8 years of core enterprise IT security experience, with 3+ dedicated years actively designing, building, and deploying software within Okta or SailPoint environments.
  
• Strong technical mastery of web identity languages (SAML, OIDC, OAuth), directory structures (LDAP, Active Directory), and SCIM provisioning protocol architectures.
  
• Deep structural understanding of zero-trust network principles, cloud application architectures, security boundary perimeters, and lifecycle tracking metrics.
  
• Mandatory certification: Okta Certified Professional/Consultant OR SailPoint Certified IdentityNow/IdentityIQ Engineer.
  

Preferred Qualifications

• Familiarity with Privileged Access Management (PAM) architectures like CyberArk or BeyondTrust.