Partner IAM - Security Platform Engineer

Lincoln Motor Company; Chennai; On-site; INR 2,000,000 - 3,200,000; Full time

Job summary

Ford is seeking an experienced Identity and Access Management (IAM) engineer to design, develop, and deploy scalable IAM capabilities using Microsoft Entra ID and External ID. You will build RESTful services with Java/Spring Boot, integrate with Microsoft Graph API, and create web UIs, while collaborating with security and architecture teams to enhance enterprise identity, security, and automation.

The role involves contributing to platform strategy, architecture, and product roadmaps, with

Qualifications

• Hands-on experience designing or engineering identity solutions using Microsoft Entra ID, with external/B2B identities.
• Strong experience developing RESTful APIs using Java and Spring Boot.
• Experience with modern JavaScript/TypeScript frameworks such as Angular.
• Experience implementing CI/CD pipelines and DevSecOps tooling.

Responsibilities

• Design, develop, deploy, and support IAM capabilities using Microsoft Entra ID and External ID.
• Develop and maintain Spring Boot RESTful APIs and web UIs.
• Collaborate with cross-functional teams to align with security standards.
• Build monitoring and diagnostics with Kusto and related tooling.

Skills

Entra ID

REST APIs

Java

Spring Boot

Angular/TypeScript

CI/CD

GitHub/Jira

Cloud experience

Education

Bachelor’s degree in CS/IT or related

Tools

Microsoft Graph API

KQL

Job description

Job Description:

Our Identity and Access Management platforms enable dealers, suppliers, and other external partners to securely access Ford applications and resources.

We are undertaking a critical modernization initiative to migrate B2B users from on-premises identity solutions to cloud-based identity services. This transformation is designed to improve the user and single sign-on experience, strengthen security and risk management, and enable greater automation of user onboarding and offboarding.

In this role, you will design, develop, deploy, and support scalable IAM capabilities using Microsoft Entra ID and Microsoft Entra External ID. You will work closely with globally distributed engineering, architecture, security, and application teams and contribute throughout the software development lifecycle.

• Design, build, test, and maintain secure applications and services using Java, Spring Boot, REST APIs, and relevant web technologies.
• Engineer identity solutions using Microsoft Entra ID and Microsoft Entra External ID, with a particular focus on external/B2B identities.
• Develop integrations with Microsoft Graph API and related Microsoft identity services.
• Design, develop, and maintain Spring Boot RESTful API microservices and web user interfaces.
• Collaborate with technical leads, architects, security teams, and application teams to deliver IAM platform capabilities aligned with enterprise security and architecture standards.
• Analyze, design, and implement tactical and strategic IAM solutions that improve the organization's security posture and user experience.
• Contribute to IAM platform strategy, technical architecture, and product roadmaps.
• Build and maintain monitoring, alerting, operational dashboards, and diagnostic capabilities using tools and query languages such as Kusto Query Language (KQL).
• Support production operations, including service requests, incidents, problems, and root-cause analysis.
• Create and maintain technical documentation, including architecture diagrams, API documentation, coding standards, configuration guidance, operational procedures, and application onboarding documentation.
• Apply Agile software development practices to deliver reliable, secure, and maintainable solutions.
• Build and use continuous integration and continuous delivery (CI/CD) pipelines to automate software build, testing, security validation, and deployment.
• Collaborate effectively with globally distributed and cross-functional teams.
• Demonstrate ownership across the end-to-end software engineering lifecycle, from requirements and design through development, testing, deployment, and production support.
• Use AI-assisted development tools, including GitHub Copilot or equivalent tools, to accelerate development, testing, documentation, and other software development lifecycle activities while maintaining appropriate security and quality controls.
• Participate in rotational on-call support as required.

Required

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience.
• 5+ years of relevant software engineering, IAM, or IT experience.
• Hands-on experience designing or engineering identity solutions using Microsoft Entra ID, with experience supporting external/B2B identities.
• Strong experience developing RESTful APIs using Java and Spring Boot.
• Experience integrating applications with Microsoft Graph API.
• Experience with web application development using Angular or another modern JavaScript/TypeScript framework.
• Strong understanding of relational and/or NoSQL databases.
• Experience building APIs, batch services, or web applications with automated unit, integration, and end-to-end testing.
• Experience implementing automated build, test, security, and deployment processes using CI/CD pipelines.
• Experience with development tools such as GitHub, Jira, and Postman.
• Familiarity with application-security and DevSecOps tooling such as 42Crunch, SonarQube, or Checkmarx.
• Experience with PowerShell or comparable scripting/automation technologies.
• Experience troubleshooting complex enterprise applications and identity integrations.
• Strong problem-solving, communication, and collaboration skills.
• Ability to communicate complex technical concepts to engineering teams, application owners, business partners, and leadership.
• Experience collaborating effectively with globally distributed teams.
• Ability to manage priorities and ambiguity while delivering against deadlines.
• Ability to participate in rotational on-call support.

Preferred

• Deep hands-on experience with Microsoft Entra External ID for B2B/external customer or partner identity solutions.
• Experience with Google Cloud Platform, particularly Cloud Run, container-based services, Cloud Logging, and Cloud Monitoring.
• Experience with Microsoft Azure services.
• Experience with Azure DevOps for CI/CD pipeline management and deployment.
• Experience with Kusto Query Language (KQL) for monitoring, diagnostics, and operational analysis.
• Experience using AI-assisted engineering tools such as GitHub Copilot to support software development, testing, documentation, and delivery.
• Experience designing, deploying, and supporting IAM capabilities within a large enterprise environment.