Identity & Access Management Technical Lead

Ameriprise-Financia; Dadri; On-site; INR 1,400,000 - 2,200,000; Full time

Job summary

Ameriprise India LLP seeks a skilled IAM Engineer with Azure cloud expertise to design, implement and support Azure infrastructure, Entra ID and governance. The role includes automation, 24x7 production support, and collaboration with program leads. In-office, with rotational shifts through India.

The candidate should have 7–10 years in Azure Cloud Administration/Engineering, strong SSO knowledge and experience with IAM platforms; certifications like AZ-104/305/SC-300 are preferred.

Qualifications

• Experience in design, implement and manage Azure cloud infrastructure and services.
• Proficient in Azure Entra ID, MFA, Conditional Access, RBAC and Identity Governance.
• Hands-on scripting in PowerShell; Terraform or ARM/Bicep for IaC.
• Strong knowledge of SSO, federation techs (SAML, OAuth, OIDC, LDAP).
• Experience supporting 24x7 production environments and ITIL processes.

Responsibilities

• Design, implement and manage Azure cloud infrastructure and services to ensure high availability.
• Manage Azure Entra ID and identity governance, MFA, and access controls.
• Develop automation with PowerShell, Terraform, and CI/CD pipelines.
• Monitor environments using Azure Monitor, Dynatrace, or Splunk; perform RCAs.
• Lead and mentor engineering teams and coordinate with stakeholders.

Skills

Azure IAM

SSO & Federation

PowerShell

Leadership

Incident management

Education

Bachelor's degree in IT/CS

Tools

Azure Entra ID

Terraform

ARM Templates

Bicep

Azure DevOps

Dynatrace

Job description

About Our CompanyAmeriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.Job DescriptionSeeking a highly skilled IAM Engineer with strong expertise in Azure cloud implementation, configuration, development, automation, and production support. The candidate will lead Azure and Identity services, support enterprise-scale environments, drive operational excellence, and work closely with Program Delivery Leads. This position requires participation in rotational shifts and providing support for critical production services.Azure Cloud & InfrastructureDesign, implement, and manage Azure cloud infrastructure and services.Administer Azure subscriptions, networking, compute, storage, security, and governance.Support cloud migration, modernization, and transformation initiatives.Ensure high availability, performance, and reliability of Azure environments.Azure Identity & Access ManagementManage and support Azure Entra ID (Azure AD), MFA, Conditional Access, RBAC, and Identity Governance.Integrate applications with Azure Entra ID and enterprise identity platforms.Support authentication, authorization, and federation services- SSO & IAM SolutionsConfigure and troubleshoot SSO integrations using SAML, OAuth, OIDC, and LDAP.Support and administer IAM platforms such as:Broadcom SiteMinderPingFederatePingAccessAzure Entra IDOktaSupport application onboarding, federation, and access management activities.Automation & DevelopmentDevelop automation solutions using PowerShell, Azure Automation, Logic Apps, Functions, and REST APIs.Implement Infrastructure as Code using Terraform, ARM Templates, or Bicep.Drive operational efficiency through automation and self-service solutions.Monitoring & Production SupportMonitor cloud and IAM platforms using Azure Monitor, Log Analytics, Dynatrace, Splunk, or similar tools.Perform incident troubleshooting, root cause analysis, and service restoration.Support 24x7 production environments and critical business applications.ITIL & Service ManagementManage Incident, Problem, Change, and Release processes.Ensure compliance with ITIL best practices and operational procedures.Maintain technical documentation, SOPs, and operational runbooks.Leadership & DeliveryLead and mentor engineering teams.Collaborate with Program Delivery Leads, architects, security teams, and business stakeholders.Drive project delivery, service improvements, and technical governance.Manage risks, dependencies, and stakeholder communications.Required Qualifications7-10 years of experience in Azure Cloud Administration, Engineering, and Support.Strong expertise in Microsoft Azure, including Azure Entra ID, Networking, Compute, Storage, Security, and Governance.Hands-on experience with Azure Entra ID, MFA, Conditional Access, RBAC, Identity Governance, and PIM.Strong knowledge of SSO and Federation technologies including SAML, OAuth, OIDC, LDAP, and SCIM.Experience with IAM platforms such as SiteMinder, PingFederate, PingAccess, Okta, or similar solutions.Experience integrating enterprise applications with SSO and Identity Providers.Hands-on experience in PowerShell scripting, Azure Automation, Logic Apps, Azure Functions, and REST APIs.Experience with monitoring tools such as Azure Monitor, Log Analytics, Dynatrace, Splunk, or equivalent.Good understanding of ITIL processes, including Incident, Problem, Change, and Release Management.Experience supporting critical production environments and participating in 24x7 rotational shifts.Proven ability to lead technical teams and work closely with Program Delivery Leads and business stakeholders.AWS IAM and multi-cloud experience will be an added advantage.Preferred QualificationsMicrosoft Azure certifications such as AZ-104, AZ-305, or SC-300.Experience with SiteMinder, Ping Identity Suite (PingFederate, PingAccess), and Okta.Knowledge of CyberArk and Privileged Access Management concepts.Experience with Terraform, Bicep, ARM Templates, Azure DevOps, and CI/CD pipelines.Exposure to AWS Cloud and AWS IAM.Experience in enterprise-scale IAM transformation, cloud migration, and modernization initiatives.Strong troubleshooting, communication, stakeholder management, and mentoring skills.In-Office CollaborationWe are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.Full-Time/Part-TimeFull timeTimings(4:45p-1:15a)India Business UnitAWMPO AWMP&S President's OfficeJob Family GroupTechnologyAmeriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.