Manager - Identity and Access Management

ameriprise; Gurugram District; On-site; INR 3,500,000 - 6,000,000; Full time

Job summary

Ameriprise India LLP seeks an experienced IAM Engineering Manager to lead 24x7 operations for enterprise IAM, with deep expertise in Azure Cloud, Broadcom SiteMinder, and API Gateway. You will oversee identity management, authentication, federation, and governance across cloud and on-prem environments.

The role requires hands-on automation, IaC skills (Terraform, PowerShell, ARM/Bicep) and strong leadership for enterprise-scale IAM teams, participating in critical production events and platform

Qualifications

• 14+ years of overall IT experience with at least 10+ years in Identity & Access Management and 3+ years leading IAM Engineering, Operations, or Platform Support teams in enterprise-scale environments.

Responsibilities

• Own and lead 24x7 operational support of the enterprise IAM platform, ensuring high availability, stability, performance, and compliance of critical identity services.
• Provide end-to-end platform support for IAM infrastructure, including Broadcom SiteMinder, API Gateway, IDM, Azure Entra ID, Active Directory, Authentication, and Access Management services.
• Ensure adherence to service availability, SLA, SLO, incident response, problem management, and change management processes for all IAM shared services.
• Lead Major Incident (P1/P2) management, root cause analysis, post-incident reviews, and implementation of preventive measures.
• Monitor, maintain, and optimize IAM infrastructure health through proactive capacity management, performance tuning, health checks, and operational automation.
• Drive operational excellence by reducing MTTR, improving platform reliability, and automating routine support and maintenance activities.
• Manage support for cloud-based IAM services across Azure and AWS, including identity lifecycle management, federation, MFA, Conditional Access, Privileged Access, and governance solutions.

Skills

Leadership

Team management

Cloud security

Tools

Azure Entra ID

Active Directory

Broadcom SiteMinder

Broadcom API Gateway

Identity Manager (IDM)

Azure Automation

Terraform

PowerShell

ARM/Bicep

SAML

OAuth 2.0

OIDC

SCIM

Job description

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm's focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.

Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You'll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Job Description

Looking for a highly skilled IAM Engineering Manager with deep expertise in Microsoft Azure Cloud, Identity and Access Management (IAM), and enterprise security platforms. The ideal candidate will have strong hands-on experience in Azure implementation, configuration, development, automation, and production support, along with expertise in Broadcom SiteMinder SSO, Broadcom API Gateway, Identity Management (IDM), Authentication, Authorization, Federation, and Access Governance solutions.

Key Responsibilities

• Own and lead 24x7 operational support of the enterprise IAM platform , ensuring high availability, stability, performance, and compliance of critical identity services.
• Provide end-to-end platform support for IAM infrastructure, including Broadcom SiteMinder, API Gateway, Identity Manager (IDM), Azure Entra ID, Active Directory, Authentication, and Access Management services.
• Ensure adherence to service availability, SLA, SLO, incident response, problem management, and change management processes for all IAM shared services.
• Lead Major Incident (P1/P2) management , root cause analysis, post-incident reviews, and implementation of preventive measures.
• Monitor, maintain, and optimize IAM infrastructure health through proactive capacity management, performance tuning, health checks, and operational automation.
• Drive operational excellence by reducing MTTR, improving platform reliability, and automating routine support and maintenance activities.
• Manage support for cloud-based IAM services across Azure and AWS , including identity lifecycle management, federation, MFA, Conditional Access, Privileged Access, and governance solutions.
• Coordinate with global infrastructure, cloud, security, and application teams to ensure seamless support for business-critical IAM platforms and services.
• Participate in rotational on-call support and provide leadership during critical production events, outages, disaster recovery exercises, and platform upgrades.
• Establish and maintain operational runbooks, knowledge articles, support procedures, recovery plans, and platform documentation.
• Drive IAM automation using PowerShell, Terraform, Azure Automation, ARM/Bicep templates, and Infrastructure as Code (IaC) practices.
• Lead cloud authentication and authorization integrations leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and JWT-based security models .
• Support cloud security initiatives involving Zero Trust Architecture, Adaptive Access Controls, Risk-Based Authentication, and Identity Threat Detection .

Required Qualifications

• 14+ years of overall IT experience with at least 10+ years in Identity & Access Management and 3+ years leading IAM Engineering, Operations, or Platform Support teams in enterprise-scale environments.
• This will position the role clearly as a senior IAM Engineering Manager responsible for Azure, AWS, Broadcom IAM Platforms, 24x7 production support, cloud identity modernization, and people leadership.

Preferred Qualifications

• Hands-on experience with Microsoft Entra ID (Azure AD), Azure MFA, Conditional Access, Identity Governance, PIM, Access Reviews, Entitlement Management, and B2B/B2C identity solutions .
• Strong expertise in AWS IAM, AWS Organizations, IAM Roles, Identity Federation, AWS SSO/Identity Center, and cloud security best practices .
• Experience with modern IAM platforms such as Okta, Ping Identity, SailPoint, CyberArk, Saviynt, ForgeRock, Microsoft Entra ID, and Broadcom IAM Suite .
• Experience implementing SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, Kerberos, LDAP, and REST API security frameworks .
• Experience with Infrastructure as Code (IaC) tools including Terraform, Ansible, ARM, and Bicep .
• Experience supporting cloud-native workloads on Azure and AWS , including Kubernetes, AKS, EKS, Docker, and container security.
• Knowledge of Zero Trust security architecture, Identity Security, PAM, CIEM (Cloud Infrastructure Entitlement Management), and Identity Governance & Administration (IGA) .
• Expe