IdentITy and Access Management Engineer

SAS Research and Development (SAS R&D); Pune District; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

SAS Research and Development (SAS R&D) in Pune, India seeks an experienced Identity Access Management (IAM) Systems Engineer to serve as Lead Engineer for the IAM team. The role focuses on expanding identity capabilities, implementing SSO, MFA, and directory services, and collaborating across US/EMEA regions while aligning security with software delivery.

You will mentor Identity Analysts, develop runbooks and enablement materials, and leverage AI-assisted tooling to accelerate secure identity

Qualifications

• 5+ years of Identity & Access Management or Security experience.
• 3+ years administering federation and SSO technology.
• Deep knowledge of federated identity, directory services, RBAC, MFA, and SSO standards (SAML, OIDC, SCIM, LDAP).
• Experience with Azure cloud platform and conditional access policies.
• Ability to overlap with EMEA business hours for collaboration.
• Mentoring, training, and documentation skills; enable analysts to support engineering outcomes.
• Familiarity with AI tools for engineering productivity and automation.

Responsibilities

• Represent the IAM program with expertise in federation, SSO, MFA, and identity governance.
• Configure and manage Active Directory, Azure Entra ID, Okta, and other identity systems.
• Implement and support SSO federations for internal and external environments.
• Collaborate with identity architects to integrate applications within reference architectures.
• Deliver customer-focused service and drive security governance in software delivery.
• Ensure security policies and processes support secure development goals.
• Coordinate knowledge transfer with US and EMEA stakeholders.
• Develop runbooks, training, and enablement materials for Identity Analysts.
• Utilize AI-assisted tooling to accelerate identity platform enhancements securely.

Skills

IAM

SSO

federation

directory services

Azure

Okta

Active Directory

RBAC

MFA

SAML

OIDC

SCIM

LDAP

AI tooling

Education

Bachelor's or Master's in Computer Science, Engineering, or related field

Tools

Azure Entra ID

Okta

Active Directory

Azure AD app registrations

Job description

Job Description

We’re looking for an experienced Identity Access Management (IAM) Systems Engineer to join our IAM team in Pune, India as the Lead Engineer supporting the regional Identity function. You will be responsible for expanding the capabilities of our customer and enterprise identity experience, while also helping drive adoption of security best practices throughout SAS.

This position supports the Identity & Access Management Program along with processes and technologies related to those services and plays a key role in building engineering depth by partnering with and upskilling our Identity Analyst community.

Primary Responsibilities

• Represent the IAM Program with subject matter expertise in federation services/single sign-on, multi-factor authentication, user access automation, and identity governance.
• Configure and manage Active Directory, Microsoft Entra ID (Azure), Okta, and other directory services and cloud identity systems. Provide operational support for these platforms.
• Implement and support SSO federations for both internal and external customer environments.
• Partners with identity architects and other engineers to integrate applications within reference architecture by providing technical requirements, implementation services, and operational support.
• Deliver excellent customer service using a customer first and continuous improvement mindset.
• Ensures all applicable security policies and processes are followed to support the organization’s secure software development goals.
• Work a schedule that overlaps with EMEA business hours as needed to facilitate knowledge transfer, operational continuity, and collaboration across US and EMEA based stakeholders.
• Develop, document, and deliver enablement (training, runbooks, and coaching) to upskill Identity Analysts to better support engineering needs in the region (e.g., onboarding, access automation, SSO/MFA integrations, and platform hygiene).
• Leverage AI-assisted tooling (e.g., copilots, code assistants, and AI-enabled automation) to accelerate identity platform enhancements, improve operational efficiency, and supplement team capabilities while maintaining strong security and governance practices.

Requirements

(Explain the technical areas/skills required for hiring)

Essential

• You’re curious, passionate, authentic, and accountable. These are our values and influence everything we do.
• 5+ years of Identity & Access Management or Security experience
• 3+ years of direct experience with administering federation and SSO technology and participation in designing and executing SSO implementation processes.
• Deep expertise of federated identity systems, directory services, role-based access control, multi-factor authentication, and SSO (including modern authentication and authorization standards and protocols such as SAML, OIDC, SCIM, and LDAP).
• Independent administration of Azure cloud platform managing applications using app registration and admin consent, defining conditional access policies, and applying security configuration settings.Independent experience with IAM disciplines including conditional access, managed workflows, and task auditability (monitoring and alerting for changes to accounts and resources).
• Ability to work with regular overlaps into EMEA business hours to support cross-region collaboration and knowledge transfer.
• Demonstrated ability to develop others through mentoring, training, and documentation; experience enabling analyst or operations teams to support engineering outcomes.
• Familiarity with AI tools used for engineering productivity and automation (e.g., copilots, prompt-driven workflow automation, or AI-enabled scripting) and the judgment to apply them securely in an enterprise environment.

Additional

• Ability to prioritize and deliver multiple initiatives simultaneously.
• Strong customer service mindset with a focus on business outcomes.
• Proven ability to lead technical discussions and stakeholder meetings.
• Strong analytical & problem-solving skills.

Preferences

• Experience with setup and administration of identity and access management on multiple major cloud providers like AWS, Azure and GCP.
• Experience with scripting (PowerShell or others) and simple programming to automate repetitive tasks and processes.
• Familiarity with Privilege Access Management systems for secrets management.
• Experience building internal tools or automations using scripting and/or AI-assisted development (e.g., GitHub Copilot, Microsoft Copilot, ChatGPT-style assistants) to improve identity operations and user experience.
• Experience with technical document creation.

Mandatory Technical Skills

Administration of Federation and SSO technology

Total Years of Relevant Experience

5+ years of Identity & Access Management or Security experience

Education Preference

Bachelor's / master’s degree in computer science, Engineering, or a related quantitative field

Equivalent combination of related education, training and experience may be considered in place of the above qualifications.