IAM (Identity & Access Management) Engineer (Okta / SailPoint)

FyerX Global Private Limited; India; Remote; INR 900,000 - 1,500,000; Part time

Job summary

FyerX Global Private Limited is seeking an experienced IAM Engineer for a remote contract role to design, configure, and secure our global identity and access governance footprint.

The candidate will orchestrate lifecycle workflows, configure SSO integrations, and enforce zero-trust across cloud and on-premise matrices, including complex RBAC/ABAC structures.

Qualifications

• 4–8 years of core enterprise IT security experience.
• 3+ dedicated years designing, building, and deploying Okta or SailPoint solutions.

Responsibilities

• Configure and deploy core IAM modules and onboarding pipelines.
• Design and maintain SSO configurations with federated connections and SAML/OIDC profiles.
• Build automated provisioning workflows via API connectors to manage directory feeds.
• Implement adaptive MFA policies and context-aware security controls.
• Govern RBAC/ABAC and enforce least-privilege access for cloud and on-prem apps.
• Collaborate with infrastructure teams to ensure secure connectivity to directories and SaaS apps.
• Lead regression tests and patch cycles to prevent authentication issues.

Skills

Zero-trust security

RBAC/ABAC

IAM governance

SSO configurations

Lifecycle management

Tools

Okta

SailPoint

SAML/OIDC/OAuth

LDAP/Active Directory

SCIM provisioning

Job description

This is a remote position.

IAM (Identity & Access Management) Engineer (Okta / SailPoint)

Job Details

• Employment Type: Contract
• Work Mode: Remote
• Location: Offshore
• Total Experience Required: 4 to 8 years
• Relevant Experience Required: 3+ years of dedicated implementation and configuration experience across enterprise IAM platforms (Okta or SailPoint)
• Mandatory Certification: Okta Certified Professional/Consultant or SailPoint Certified IdentityNow Engineer

Job Summary

We are seeking an experienced IAM Engineer to design, configure, and secure our global identity and access governance footprint. The ideal candidate will orchestrate complex lifecycle management pathways, configure secure single sign-on integrations, build automated user provisioning workflows, and enforce strict zero-trust boundary guidelines across cloud and on-premise application matrices.

Key Responsibilities

• Configure and deploy core IAM framework modules, managing user onboarding pipelines, automated lifecycle states, and access certification governance campaigns.
• Design and maintain Single Sign-On (SSO) configurations, setting up federated cross-app connections, custom SAML 2.0 / OpenID Connect (OIDC) profiles, and OAuth authorization parameters.
• Build automated provisioning workflows, writing system rules, attribute transformations, and direct API connector scripts to manage directory feeds (Active Directory, HR systems).
• Implement adaptive Multi-Factor Authentication (MFA) policies, configuring context-aware security profiles, network geofencing metrics, and sign-on threshold parameters.
• Govern identity security and access access levels, structuring complex role-based access control (RBAC), attribute-based access control (ABAC), and least-privilege security lines.
• Collaborate with enterprise infrastructure teams to support secure connectivity with directory endpoints, internal databases, and downstream SaaS application rings.
• Lead update regression validations and patch cycles, auditing platform custom configurations across sandboxes to prevent authentication processing drops.

Requirements

• 4 to 8 years of core enterprise IT security experience, with 3+ dedicated years actively designing, building, and deploying software within Okta or SailPoint environments.
• Strong technical mastery of web identity languages (SAML, OIDC, OAuth), directory structures (LDAP, Active Directory), and SCIM provisioning protocol architectures.
• Deep structural understanding of zero-trust network principles, cloud application architectures, security boundary perimeters, and lifecycle tracking metrics.
• Mandatory certification: Okta Certified Professional/Consultant OR SailPoint Certified IdentityNow/IdentityIQ Engineer.

Preferred Qualifications

• Prior scripting proficiency utilizing JavaScript, Python, or PowerShell to extend platform workflows, automate bulk user transitions, or parse system API logs.
• Familiarity with Privileged Access Management (PAM) architectures like CyberArk or BeyondTrust.