Principal Engineer - IT Systems Engineering

Marsh; Dadri; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Marsh is seeking a Principal Engineer – IT System Engineering to support CIAM services on Okta. The role focuses on identity and access management, policy management, incident handling, and onboarding of applications in a hybrid Noida/Gurugram setup.

You will collaborate with application owners, TPMs, and support teams to ensure secure, reliable identity services for business applications and maintain CIAM processes and documentation.

Qualifications

• Bachelor’s degree in computer science, information technology, or a related field with 1–4 years of experience.
• Good understanding of Okta CIAM capabilities and platform administration.
• Experience in user lifecycle management, access management, and group-based access control.
• Knowledge of SAML, OIDC, Identity Providers, and authentication mechanisms.
• Experience managing authentication, access, password, MFA, and session policies.
• Strong troubleshooting, analytical, and incident management skills.

Responsibilities

• Monitor ServiceNow queues, incidents, changes, and support emails regularly.
• Review Sev 1–3 tickets within service levels and resolve access-related issues.
• Manage Okta group mapping and assign groups to users.
• Onboard new applications in Okta with SAML, OIDC, and service apps.
• Create and maintain authentication and access policies across applications.
• Manage Okta branding, automations, and workflows; stay updated on new features.
• Provide standard and custom Okta reports and maintain documentation.

Skills

Okta CIAM

IAM concepts

SAML / OIDC

Authentication policies

MFA management

Group-based access control

Education

Bachelor's degree in Computer Science or IT

Tools

ServiceNow

Active Directory (AD)

Workday

CyberArk

Okta workflows

Job description

We are seeking a talented individual to join Mercer AMSI at Noida/Gurgaon. This is a hybrid role that has a requirement of working at least three days a week in the office.

Principal Engineer – IT System Engineering (Grade C2)

No of Positions: 1 Role Summary

This role is responsible for supporting and administering Customer Identity and Access Management (CIAM) services on the Okta platform. The position covers operational support, user and access administration, application onboarding, policy management, issue resolution, reporting, and documentation. The role works closely with application owners, TPMs, and support teams to deliver secure, reliable, and efficient identity services for business applications.

Key Responsibilities

Operational Support and Incident Management

• Monitor ServiceNow queues, incidents, change orders, and support emails on a regular basis.
• Review and respond to Sev 1, Sev 2, and Sev 3 tickets within agreed service levels.
• Investigate and resolve access-related and application-related issues raised by users and application teams.
• Support urgent business requests, including testing-related access requirements, where applicable.

User and Access Administration

• Manage Okta group mapping for existing applications, including assignment and removal of groups.
• Assign Okta groups to users based on approved access requests.
• Create external user accounts for applications in line with approved business requests.
• Update primary email addresses for external users when required.
• Reset passwords for external users and perform MFA resets as needed.
• Create Okta groups to support application onboarding and access requirements.

Application Onboarding and Configuration

• Support onboarding of new applications in Okta, including SAML, OIDC, and service applications.
• Implement approved configuration changes for existing applications.
• Partner with application owners and TPMs to understand onboarding requirements, identity provider setup, and authentication needs.

Policy and Identity Administration

• Create and manage authentication and access policies for applications.
• Manage password, MFA enrollment, and global session policies across the Okta environment.
• Create and maintain Identity Providers in Okta.
• Manage authorization servers, including scopes, claims, and access policies.

Platform Administration and Continuous Improvement

• Manage Okta branding elements, including themes, hosted pages, and custom email templates.
• Create and maintain Okta automations and workflows.
• Monitor new Okta feature releases and assess their impact on applications and services.
• Contribute to the continuous improvement of CIAM processes and platform capabilities.

Reporting and Documentation

• Provide standard and custom Okta reports to application owners on request.
• Maintain process documents, standard operating procedures, and support documentation in Wiki and Confluence.
• Keep operational and knowledge documents current to support effective service delivery.

Qualifications

• Bachelor’s degree in computer science, Information Technology, or a related field, with 1–4 years of relevant professional experience.
• Good understanding of Okta CIAM capabilities and platform administration.
• Experience in user lifecycle management, access management, and group-based access control.
• Knowledge of SAML, OIDC, Identity Providers, and authentication mechanisms.
• Experience managing authentication, access, password, MFA, and session policies.
• Strong understanding of IAM concepts and secure access management, with good problem-solving skills.
• Knowledge of delegated authentication concepts.
• Foundational knowledge of related platforms/tools such as Active Directory (AD), Workday, and CyberArk.
• Familiarity with Okta workflows, branding, and authorization server configuration.
• Experience with ServiceNow is preferred.
• Strong troubleshooting, analytical, and incident management skills.
• Good communication, documentation, and stakeholder management skills.
• Ability to work collaboratively with application owners, TPMs, and support teams.

Key Attributes

• Strong attention to detail and operational discipline.
• Ability to manage priorities effectively in a fast-paced environment.
• Service-oriented mindset with a focus on quality and timely resolution.
• Commitment to process compliance, documentation, and continuous improvement.

Role Details

• Business / Function: MMC Technology / Application Management Services (AMS)
• Segment: Customer Identity Access Management
• Location: Noida/Gurugram, India (Hybrid)

Marsh (NYSE: MRSH) is a global leader in risk, reinsurance and capital, people and investments, and management consulting, advising clients in 130 countries. With annual revenue of over $27 billion and more than 95,000 colleagues, Marsh helps build the confidence to thrive through the power of perspective. For more information, visit marsh.com, or follow us on LinkedIn and X.

Marsh is committed to embracing a diverse, inclusive and flexible work environment. We aim to attract and retain the best people and embrace diversity of age, background, caste, disability, ethnic origin, family duties, gender orientation or expression, gender reassignment, marital status, nationality, parental status, personal or social status, political affiliation, race, religion and beliefs, sex/gender, sexual orientation or expression, skin color, or any other characteristic protected by applicable law.

Marsh is committed to hybrid work, which includes the flexibility of working remotely and the collaboration, connections and professional development benefits of working together in the office. All Marsh colleagues are expected to be in their local office or working onsite with clients at least three days per week. Office-based teams will identify at least one “anchor day” per week on which their full team will be together in person.

R_366250