Manager - Identity and Access Management

COMFORT SYSTEMS; Gurugram District; Hybrid; INR 3,500,000 - 5,500,000; Full time

Job summary

Ameriprise India LLP in Gurugram, Haryana, is seeking an experienced IAM Engineering Manager to lead 24x7 operations for the enterprise IAM platform and drive cloud identity modernization. The role centers on Azure, Broadcom SiteMinder, API Gateway, IDM and federation, with global collaboration and on-call leadership.

You will manage cloud IAM across Azure and AWS, implement automation, and guide incident response, governance, and security best practices in a hybrid work setting.

Qualifications

• 14+ years of IT experience with at least 10+ years in IAM and 3+ years leading IAM, operations, or platform teams in enterprise environments.
• Senior IAM Engineering Manager responsible for Azure, AWS, Broadcom IAM platforms, 24x7 production support, cloud identity modernization, and people leadership.

Responsibilities

• Own and lead 24x7 operational support of the enterprise IAM platform.
• Provide end-to-end platform support for IAM infrastructure (Broadcom SiteMinder, API Gateway, IDM, Azure Entra, AD, Auth, and Access Management).
• Ensure adherence to service availability, SLA/SLO, incident response, problem management, and change control for IAM services.
• Lead Major Incident management, root cause analysis, and preventive actions.
• Monitor and optimize IAM health through capacity management, tuning, and automation.
• Drive operational excellence by reducing MTTR and automating routine tasks.
• Manage cloud IAM for Azure and AWS including lifecycle management, federation, MFA, and governance.
• Coordinate with global infra, cloud, security, and app teams for IAM platforms and services.
• Participate in on-call, DR exercises, outages, and platform upgrades.
• Establish runbooks, knowledge articles, procedures, recovery plans, and documentation.
• Drive IAM automation using PowerShell, Terraform, Azure Automation, ARM/Bicep (IaC).
• Lead cloud auth integrations using SAML, OAuth2, OIDC, SCIM, and JWT models.
• Support Zero Trust, Adaptive Access, Risk-Based Authentication, and Identity Threat Detection.

Skills

Azure IAM

Broadcom SiteMinder

Identity & Access Management

IDM

PowerShell

Terraform

Azure Bicep/ARM

SAML

OAuth 2.0

OIDC

SCIM

JWT

Kubernetes

Zero Trust

AWS IAM

Tools

Okta

Ping Identity

SailPoint

CyberArk

Saviynt

ForgeRock

Microsoft Entra ID

Job description

Hybrid

Gurugram, Haryana, India

Full time

R26_3520

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.

Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Job Description

Looking for a highly skilled IAM Engineering Manager with deep expertise in Microsoft Azure Cloud, Identity and Access Management (IAM), and enterprise security platforms. The ideal candidate will have strong hands-on experience in Azure implementation, configuration, development, automation, and production support, along with expertise in Broadcom SiteMinder SSO, Broadcom API Gateway, Identity Management (IDM), Authentication, Authorization, Federation, and Access Governance solutions.

Key Responsibilities

• Own and lead 24x7 operational support of the enterprise IAM platform , ensuring high availability, stability, performance, and compliance of critical identity services.
• Provide end-to-end platform support for IAM infrastructure, including Broadcom SiteMinder, API Gateway, Identity Manager (IDM), Azure Entra ID, Active Directory, Authentication, and Access Management services.
• Ensure adherence to service availability, SLA, SLO, incident response, problem management, and change management processes for all IAM shared services.
• Lead Major Incident (P1/P2) management , root cause analysis, post-incident reviews, and implementation of preventive measures.
• Monitor, maintain, and optimize IAM infrastructure health through proactive capacity management, performance tuning, health checks, and operational automation.
• Drive operational excellence by reducing MTTR, improving platform reliability, and automating routine support and maintenance activities.
• Manage support for cloud-based IAM services across Azure and AWS , including identity lifecycle management, federation, MFA, Conditional Access, Privileged Access, and governance solutions.
• Coordinate with global infrastructure, cloud, security, and application teams to ensure seamless support for business-critical IAM platforms and services.
• Participate in rotational on-call support and provide leadership during critical production events, outages, disaster recovery exercises, and platform upgrades.
• Establish and maintain operational runbooks, knowledge articles, support procedures, recovery plans, and platform documentation.
• Drive IAM automation using PowerShell, Terraform, Azure Automation, ARM/Bicep templates, and Infrastructure as Code (IaC) practices.
• Lead cloud authentication and authorization integrations leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and JWT-based security models .
• Support cloud security initiatives involving Zero Trust Architecture, Adaptive Access Controls, Risk-Based Authentication, and Identity Threat Detection .

Required Qualifications

• 14+ years of overall IT experience with at least 10+ years in Identity & Access Management and 3+ years leading IAM Engineering, Operations, or Platform Support teams in enterprise-scale environments.
• This will position the role clearly as a senior IAM Engineering Manager responsible for Azure, AWS, Broadcom IAM Platforms, 24x7 production support, cloud identity modernization, and people leadership.

Preferred Qualifications

• Hands-on experience with Microsoft Entra ID (Azure AD), Azure MFA, Conditional Access, Identity Governance, PIM, Access Reviews, Entitlement Management, and B2B/B2C identity solutions .
• Strong expertise in AWS IAM, AWS Organizations, IAM Roles, Identity Federation, AWS SSO/Identity Center, and cloud security best practices .
• Experience with modern IAM platforms such as Okta, Ping Identity, SailPoint, CyberArk, Saviynt, ForgeRock, Microsoft Entra ID, and Broadcom IAM Suite .
• Experience implementing SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, Kerberos, LDAP, and REST API security frameworks .
• Experience with Infrastructure as Code (IaC) tools including Terraform, Ansible, ARM, and Bicep .
• Experience supporting cloud-native workloads on Azure and AWS , including Kubernetes, AKS, EKS, Docker, and container security.
• Knowledge of Zero Trust security architecture, Identity Security, PAM, CIEM (Cloud Infrastructure Entitlement Management), and Identity Governance & Administration (IGA) .
• Experience with cloud monitoring and observability platforms such as Azure Monitor, Log Analytics, Application Insights, Dynatrace, Splunk, and Sumo Logic .
• Azure certifications such as AZ-104, AZ-305, AZ-500, SC-300, SC-100 and AWS certifications are highly preferred.

In-Office Collaboration

We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.

Full-Time/Part-Time

Full time

Timings

(2:00p-10:30p)

India Business Unit

AWMPO AWMP&S President's Office

Job Family Group

Technology

Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.

We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.

Since 1894, Ameriprise Financial has helped people feel more confident about their financial future. Guided by strong values and a deep commitment to clients, we've remained a trusted leader in financial planning and advice for more than 130 years.

Through our businesses, Ameriprise Financial, Columbia Threadneedle Investments and RiverSource Insurance & Annuities , we deliver advice, investment and protection solutions designed for long-term success. While each business brings distinct capabilities and expertise, all are united by our unwavering focus on clients and a strong financial foundation.

For you, that means the opportunity to build a meaningful career in a high-performing, collaborative culture where your expertise can grow, your contributions are valued and your work can make a real impact.

As a global financial services company with three complementary businesses, the breadth of our capabilities sets us apart. It also creates unique opportunities for employees to learn, collaborate and grow their careers:

• Ameriprise Financial : Financial planning, advice and wealth management.
• Columbia Threadneedle Investments : Global asset management serving individual, institutional and corporate clients.
• RiverSource Insurance & Annuities : Products and solutions designed to help clients protect and grow their wealth.

Explore opportunities within each business and region below.

• Ameriprise US | Careers (https://www.ameriprise.com/careers)
• Ameriprise India | Careers
• Columbia Threadneedle Investments US | Careers (https://www.columbiathreadneedleus.com/investorspa/about/careers)
• Columbia Threadneedle Investments EMEA APAC | Careers
• RiverSource | Careers (https://www.riversource.com/your-career-at-riversource)

Can I check the status of my application?

Yes, you can check the status of your submitted application. To do so, you will need to log into the Candidate Homepage (https://ameriprise.wd5.myworkdayjobs.com/Ameriprise) with your username and password.

What information is required to apply for a job?

Requirements vary by position, state and/or region. Be prepared to provide work history, resume, and contact information at a minimum.