Security Engineer - IAM

Netradyne; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Netradyne in Bengaluru is seeking a skilled Security Engineer focused on Identity and Access Management (IAM) and Cloud Security. The role demands designing, implementing, and managing IAM solutions across AWS and Microsoft environments, with responsibilities spanning user provisioning, policy management, and security audits.

The ideal candidate has 3-6 years of experience with IAM technologies, particularly Microsoft Entra ID and AWS IAM, along with a commitment to enhancing security frameworks.

Qualifications

• 3-5 years of hands-on experience with IAM technologies and solutions.
• Demonstrated expertise in Microsoft Entra ID.
• Solid understanding of AWS IAM including identity federation and policy management.

Responsibilities

• Design, implement, and maintain identity governance frameworks using IAM.
• Manage AWS IAM policies, ensuring least privilege access principles.
• Conduct security audits to ensure compliance with regulatory standards.

Skills

IAM technologies

Microsoft Entra ID

AWS IAM

PAM Solutions

OAuth

SAML

LDAP

Kerberos

PowerShell

Python

Education

3-5 years of experience in IAM

Microsoft Certified: Identity and Access Administrator Associate

Tools

Delinea Secret Server

CyberArk

ServiceNow

Microsoft Identity Manager

Job description

Security Engineer – IAM

Experience: 3-6 years

We are seeking an experienced Security Engineer with a strong focus on Identity and Access Management (IAM) along with Cloud Security. This role offers the opportunity to design, implement, and manage enterprise-level IAM solutions across Microsoft and AWS environments. You will work with cutting‑edge IAM technologies including Microsoft Entra ID (formerly Azure AD), AWS IAM, and Privileged Access Management (PAM) solutions. We welcome applicants with 3‑5 years of IAM experience, and we are open to considering senior‑level candidates with broader security expertise.

Key Responsibilities

• Design, implement, and maintain identity governance frameworks using Microsoft Entra ID, including user provisioning, authentication policies, and conditional access strategies
• Strong understanding of cloud security concepts including cloud architecture security, shared responsibility models, and cloud‑native security best practices
• Manage AWS IAM policies, roles, and user provisioning across multiple AWS accounts, ensuring least privilege access principles
• Implement and maintain Privileged Access Management (PAM) solutions to monitor, control, and audit privileged user activities
• Configure and manage multi‑factor authentication (MFA), single sign‑on (SSO), and federation mechanisms across hybrid environments
• Conduct security audits and access reviews to ensure compliance with regulatory standards and internal security policies
• Integrate IAM solutions with enterprise applications and SaaS platforms
• Develop and maintain IAM documentation, runbooks, and disaster recovery procedures
• Manage identity and access controls for AI agents, including Copilot Studio agents and automated workflows
• Implement security frameworks for Model Context Protocol (MCP) integrations and agent‑to‑service authentication
• Design and implement granular access controls for AI agents, including scope limitations, token management, and service principal governance
• Design and maintain Role‑Based Access Control (RBAC) models across enterprise applications, ensuring appropriate permission hierarchies and least privilege principles
• Build and automate access provisioning and deprovisioning workflows using identity governance tools, reducing manual errors and improving compliance
• Implement lifecycle management and access certification processes for both human and non‑human identities
• Respond to security incidents related to identity compromise and unauthorized access

Required Qualifications

• 3‑5 years of hands‑on experience with IAM technologies and solutions
• Demonstrated expertise in Microsoft Entra ID, including administration and configuration
• Solid understanding of AWS IAM including identity federation, cross‑account access, and policy management
• Experience with at least one PAM solution (Delinea Secret Server, BeyondTrust, CyberArk, or similar)
• Strong understanding of authentication and authorization protocols (OAuth, SAML, LDAP, Kerberos)
• Knowledge of compliance frameworks (Zero Trust, NIST, SOC 2, ISO 27001)
• Excellent communication and documentation skills

Preferred Qualifications

• 3+ years of IAM experience or senior‑level security background
• Microsoft Certified: Identity and Access Administrator Associate (SC‑300) or similar certification
• Experience designing and securing AI agent architectures and autonomous workflows
• Hands‑on experience with Copilot Studio and Copilot agents security configurations
• Knowledge of Model Context Protocol (MCP) and agent‑to‑service authentication patterns
• Experience designing and implementing RBAC models across complex application ecosystems
• Expertise in automating access provisioning and deprovisioning workflows using platforms like Okta, ServiceNow, or Microsoft Identity Manager
• Experience implementing access controls specifically for AI agents, service principals, and automated workflows
• Knowledge of identity governance and lifecycle management (ILM) solutions
• Experience with multiple cloud providers (Azure, AWS, GCP)
• Experience implementing Zero Trust security architecture
• Familiarity with scripting languages (PowerShell, Python, Bash) for automation
• Experience with identity‑first security incident response

Key Technical Skills

• Microsoft: Entra ID (Azure AD), Active Directory, Microsoft 365, Azure, Graph API
• AWS: IAM, AWS SSO, Cognito, AWS Organizations, STS, CloudTrail
• PAM Solutions: CyberArk, BeyondTrust, Delinea Secret Server, HashiCorp Vault
• Protocols: OAuth 2.0, SAML, LDAP, Kerberos, OpenID Connect
• Scripting: PowerShell, Python, Bash, REST APIs
• AI & Agents: Copilot Studio, AI Agents, Model Context Protocol (MCP), Agent authentication, Agentic workflows
• RBAC & Governance: Role design, Application RBAC, Access certification, Identity lifecycle management, Segregation of duties
• Provisioning & Automation: Okta, ServiceNow, Microsoft Identity Manager, Automated workflows, Deprovisioning automation, System integration

We are committed to an inclusive and diverse team. Netradyne is an equal‑opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status, or any legally protected status.