Partner IAM - Security Platform Engineer

Ford; India; Remote; INR 900,000 - 1,200,000; Full time

Job summary

Ford is modernizing its Identity and Access Management platform by migrating B2B users from on‑prem to cloud‑based services, enhancing security, SSO, and onboarding automation for dealers, suppliers and partners.

The role designs, develops, deploys, and supports scalable IAM capabilities using Microsoft Entra ID, Graph API, Java/Spring Boot, REST APIs, and CI/CD pipelines, collaborating with global engineering, security, and application teams across the lifecycle.

Qualifications

• 5+ years of software engineering, IAM, or IT experience.
• Hands-on experience designing or engineering identity solutions using Microsoft Entra ID with external/B2B identities.
• Strong RESTful API development experience using Java and Spring Boot.
• Experience integrating applications with Microsoft Graph API.
• Experience with web app development using Angular or similar framework.
• Knowledge of relational and NoSQL databases.
• Experience with CI/CD for automated build, test, security, and deployment.
• Familiarity with GitHub, Jira, and Postman tooling.
• Exposure to DevSecOps tooling (e.g., SonarQube, Checkmarx).
• Ability to communicate complex technical concepts to diverse teams.

Responsibilities

• Design, build, test, and maintain secure IAM services and APIs.
• Engineer identity solutions using Microsoft Entra ID for external/B2B identities.
• Develop integrations with Microsoft Graph API and related identity services.
• Collaborate with global teams to deliver IAM platform capabilities.
• Contribute to IAM platform strategy, architecture, and roadmaps.
• Create monitoring dashboards and documentation; support production operations.

Skills

Experience: 5+ years

Java & Spring Boot

REST APIs

Microsoft Entra ID

Microsoft Graph API

Angular/TypeScript

CI/CD pipelines

Education

Bachelor's degree in Computer Science, Information Technology, Engineering, or related field

Tools

GitHub

Jira

Postman

PowerShell

Google Cloud Platform

Azure DevOps

Job description

Our Identity and Access Management platforms enable dealers, suppliers, and other external partners to securely access Ford applications and resources.

We are undertaking a critical modernization initiative to migrate B2B users from on-premises identity solutions to cloud-based identity services. This transformation is designed to improve the user and single sign-on experience, strengthen security and risk management, and enable greater automation of user onboarding and offboarding.

In this role, you will design, develop, deploy, and support scalable IAM capabilities using Microsoft Entra ID and Microsoft Entra External ID. You will work closely with globally distributed engineering, architecture, security, and application teams and contribute throughout the software development lifecycle.

• Design, build, test, and maintain secure applications and services using Java, Spring Boot, REST APIs, and relevant web technologies.
• Engineer identity solutions using Microsoft Entra ID and Microsoft Entra External ID, with a particular focus on external/B2B identities.
• Develop integrations with Microsoft Graph API and related Microsoft identity services.
• Design, develop, and maintain Spring Boot RESTful API microservices and web user interfaces.
• Collaborate with technical leads, architects, security teams, and application teams to deliver IAM platform capabilities aligned with enterprise security and architecture standards.
• Analyze, design, and implement tactical and strategic IAM solutions that improve the organization's security posture and user experience.
• Contribute to IAM platform strategy, technical architecture, and product roadmaps.
• Build and maintain monitoring, alerting, operational dashboards, and diagnostic capabilities using tools and query languages such as Kusto Query Language (KQL).
• Support production operations, including service requests, incidents, problems, and root-cause analysis.
• Create and maintain technical documentation, including architecture diagrams, API documentation, coding standards, configuration guidance, operational procedures, and application onboarding documentation.
• Apply Agile software development practices to deliver reliable, secure, and maintainable solutions.
• Build and use continuous integration and continuous delivery (CI/CD) pipelines to automate software build, testing, security validation, and deployment.
• Collaborate effectively with globally distributed and cross-functional teams.
• Demonstrate ownership across the end-to-end software engineering lifecycle, from requirements and design through development, testing, deployment, and production support.
• Use AI-assisted development tools, including GitHub Copilot or equivalent tools, to accelerate development, testing, documentation, and other software development lifecycle activities while maintaining appropriate security and quality controls.
• Participate in rotational on-call support as required.

Required

• Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field, or equivalent practical experience.
• 5+ years of relevant software engineering, IAM, or IT experience.
• Hands-on experience designing or engineering identity solutions using Microsoft Entra ID, with experience supporting external/B2B identities.
• Strong experience developing RESTful APIs using Java and Spring Boot.
• Experience integrating applications with Microsoft Graph API.
• Experience with web application development using Angular or another modern JavaScript/TypeScript framework.
• Strong understanding of relational and/or NoSQL databases.
• Experience building APIs, batch services, or web applications with automated unit, integration, and end-to-end testing.
• Experience implementing automated build, test, security, and deployment processes using CI/CD pipelines.
• Experience with development tools such as GitHub, Jira, and Postman.
• Familiarity with application-security and DevSecOps tooling such as 42Crunch, SonarQube, or Checkmarx.
• Experience with PowerShell or comparable scripting/automation technologies.
• Experience troubleshooting complex enterprise applications and identity integrations.
• Strong problem-solving, communication, and collaboration skills.
• Ability to communicate complex technical concepts to engineering teams, application owners, business partners, and leadership.
• Experience collaborating effectively with globally distributed teams.
• Ability to manage priorities and ambiguity while delivering against deadlines.
• Ability to participate in rotational on-call support.

Preferred

• Deep hands-on experience with Microsoft Entra External ID for B2B/external customer or partner identity solutions.
• Experience with Google Cloud Platform, particularly Cloud Run, container-based services, Cloud Logging, and Cloud Monitoring.
• Experience with Microsoft Azure services.
• Experience with Azure DevOps for CI/CD pipeline management and deployment.
• Experience with Kusto Query Language (KQL) for monitoring, diagnostics, and operational analysis.
• Experience using AI-assisted engineering tools such as GitHub Copilot to support software development, testing, documentation, and delivery.
• Experience designing, deploying, and supporting IAM capabilities within a large enterprise environment.

#LI-MF2