Iam Support Engineer

Elabs Infotech; Hyderabad, Pune District, Bengaluru; On-site; INR 1,200,000 - 2,300,000; Full time

Job summary

Elabs Infotech is seeking an experienced Identity & Access Management (IAM) Engineer to join the cybersecurity team. The role focuses on design, implementation, administration, and optimization of enterprise IAM solutions across cloud and on-prem environments.

The ideal candidate will work with SSO, MFA, identity governance, and PAM platforms such as Okta, Ping Identity, SailPoint, Saviynt, and BeyondTrust to manage lifecycle processes, access controls, and audits.

Qualifications

• Hands-on IAM engineering experience in enterprise environments.
• Experience configuring and supporting SSO, MFA, and identity federation.
• Familiarity with IAM governance and access certification workflows.

Responsibilities

• Design, implement, configure, and support IAM solutions across cloud and on-prem environments.
• Manage SSO, MFA, federation, and adaptive authentication.
• Configure Okta and Ping Identity for SSO and application integration.
• Implement and support SailPoint and Saviynt for IGA.
• Manage JML lifecycle and access provisioning workflows.
• Handle RBAC, least privilege, and SoD controls.

Skills

SSO

MFA

Identity governance

RBAC

PAM

Scripting

Tools

Okta

Ping Identity

SailPoint

Saviynt

BeyondTrust

Job description

We are looking for an experienced Identity & Access Management (IAM) Engineer to join our cybersecurity team and support the design, implementation, administration, and optimization of enterprise IAM solutions.

The ideal candidate will have hands-on experience across SSO, IGA, PAM, identity lifecycle management, access governance, and authentication technologies, with expertise in platforms such as Okta, Ping Identity, SailPoint, Saviynt, and BeyondTrust.

Key Responsibilities:

• Design, implement, configure, and support enterprise IAM solutions across cloud and on-premises environments.
• Manage and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), federation, and adaptive authentication.
• Configure and administer Okta and Ping Identity platforms for SSO, MFA, application integration, and identity federation.
• Implement and support SailPoint and Saviynt for Identity Governance & Administration (IGA).
• Manage end-to- end Joiner, Mover, Leaver (JML) identity lifecycle processes.
• Configure user provisioning, de-provisioning, access requests, approvals, roles, entitlements, and access certification campaigns.
• Perform application onboarding and develop/configure connectors for enterprise applications.
• Design and implement Role-Based Access Control (RBAC), least-privilege access, and Segregation of Duties (SoD) controls.
• Administer and support Privileged Access Management (PAM) solutions, including BeyondTrust.
• Manage privileged accounts, service accounts, credentials, vaulting, password rotation, and privileged session controls.
• Troubleshoot authentication, authorization, provisioning, federation, and access-related issues.
• Integrate IAM platforms with Active Directory, LDAP, HR systems, ITSM platforms, SaaS applications, and cloud services.
• Work with protocols including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, SCIM, and REST APIs.
• Develop automation and integrations using REST APIs, PowerShell, Python, or similar scripting technologies.
• Monitor IAM platforms and resolve incidents while ensuring SLA and security requirements are met.
• Participate in IAM platform upgrades, migrations, integrations, and new implementations.
• Maintain technical documentation, architecture diagrams, configuration guides, and operational runbooks.
• Collaborate with Cybersecurity, Infrastructure, Application, HR, Audit, and Business teams.
• Support IAM audits, compliance requirements, access reviews, and security assessments.
• Identify opportunities to automate IAM processes and improve operational efficiency.