Identity & Access Management Engineer

Cherry Bekaert; Chennai District; On-site; INR 1,200,000 - 1,500,000; Full time

Job summary

Cherry Bekaert is seeking an IAM Engineer to manage and enhance identity and access systems with a strong emphasis on Microsoft Azure / Entra ID. The role involves implementing security measures across user access, devices, and applications within the organization.

Applicants should have over 5 years of IAM, security, or cloud engineering experience, with strong proficiency in Azure AD. Join a growing global organization and work on modern identity security practices.

Qualifications

• 5+ years of experience in IAM, security, or cloud engineering.
• Strong hands‑on experience with Azure AD / Entra ID.
• Good understanding of authentication protocols (OAuth, SAML, OIDC).
• Experience with Conditional Access and Intune device compliance.
• Knowledge of privileged access management and RBAC.
• Experience using KQL / Microsoft Sentinel for monitoring.

Responsibilities

• Manage and support Microsoft Entra ID (Azure AD) – users, roles, groups, and applications.
• Build and improve Conditional Access policies to secure user sign-ins.
• Implement and manage device compliance policies using Microsoft Intune.
• Handle privileged access controls (PIM/PAM) and ensure secure role-based access.
• Manage application identities and API permissions securely.
• Monitor identity-related risks using Microsoft Sentinel & Log Analytics.
• Work with security and compliance teams to meet standards like SOC 2 / ISO 27001.
• Investigate login issues, suspicious activity, and access risks.

Skills

IAM expertise

Microsoft Azure / Entra ID

Authentication protocols (OAuth, SAML, OIDC)

Conditional Access policies

Device compliance using Intune

Privileged Access Management

KQL / Microsoft Sentinel

Job description

We are looking for an IAM (Identity & Access Management) Engineer to help manage and improve our identity and access systems. You will focus on Microsoft Azure / Entra ID and play a key role in securing user access, devices, and applications across the organization.

What You’ll Do

• Manage and support Microsoft Entra ID (Azure AD) – users, roles, groups, and applications
• Build and improve Conditional Access policies to secure user sign-ins
• Implement and manage device compliance policies using Microsoft Intune
• Handle privileged access controls (PIM/PAM) and ensure secure role-based access
• Manage application identities and API permissions securely
• Monitor identity-related risks using Microsoft Sentinel & Log Analytics
• Work with security and compliance teams to meet standards like SOC 2 / ISO 27001
• Investigate login issues, suspicious activity, and access risks

What We’re Looking For

• 5+ years of experience in IAM, security, or cloud engineering
• Strong hands‑on experience with Azure AD / Entra ID
• Good understanding of authentication (OAuth, SAML, OIDC)
• Experience with Conditional Access and Intune device compliance
• Knowledge of privileged access management and RBAC
• Experience using KQL / Microsoft Sentinel for monitoring

Nice to Have

• Experience with Microsoft Defender for Identity or similar tools
• Exposure to M&A integrations / cross‑tenant setups
• Knowledge of Zero Trust tools (like Zscaler)

Why Join Us

• Work on modern identity security (Zero Trust, cloud‑first)
• Collaborate with security, IT, and compliance teams
• Be part of a growing, global organization