Senior Consultant

Tribastion Technologies Pvt. Ltd.; Mumbai; Presencial; INR 1 500 000 - 2 300 000; Tempo integral

Resumo da oferta

Tribastion Technologies Pvt. Ltd. seeks an IAM Engineer with 4+ years of hands-on experience to support and implement IAM/IGA solutions.

You will handle onboarding, role management, access reviews, and automation across IAM processes, collaborating with cross-functional teams to ensure secure identity lifecycle operations. The role involves integration with AD/Azure AD, SSO/MFA, and various APIs, plus governance aligned to SOX, GDPR, and ISO 27001.

Qualificações

• 4+ years of IAM/IGA support or implementation experience.
• Hands-on experience with Cymmetri IDAM tool preferred.
• Proficient in Java for scripting, customization, and connector development within IAM platforms.
• Strong hands-on experience with Groovy scripting.
• API development and API testing experience (Postman, SoapUI, or similar tools).
• Working knowledge of MongoDB/SQL and ability to write queries.
• Experience with Active Directory and Azure AD for user management and auth.
• Familiarity with REST/SOAP APIs for system integration and automation.
• Knowledge of SAML, OAuth 2.0, and OIDC protocols.
• Experience configuring SSO and MFA solutions.
• Understanding RBAC/ABAC models.
• Joiner-Mover-Leaver (JML) process experience.
• User provisioning and de-provisioning across multiple systems.
• Access certification and review campaigns configuration.
• Documentation of end-user manuals and technical docs.
• UAT and production deployment experience.
• LDAP basics; Git and CI/CD familiarity a plus.
• Security-first mindset and strong problem-solving.
• Clear communication and documentation skills.
• ITIL-aligned incident and change management experience.
• Bachelor-level CS/IT or related field preferred.

Responsabilidades

• Provide daily operational support for IAM/IGA systems including onboarding/offboarding and entitlement management.
• Perform access certification and reviews; develop or customize IAM workflows and connectors using Java and Groovy.
• Build and maintain connectors for target app integrations; manage identity data in MongoDB/SQL for troubleshooting.
• Integrate with AD, LDAP, Azure AD, and RESTful/SOAP APIs for provisioning and access control.
• Configure SSO and MFA integrations; work with SAML, OAuth 2.0, and OIDC protocols.
• Design RBAC and ABAC models; manage access review campaigns and periodic reviews.
• Collaborate with teams to troubleshoot access issues and perform root-cause analysis.
• Handle incident response, RCA, and continuous improvement for IAM services.
• Mentor juniors and support knowledge transfer within the team.
• Document configurations, changes, and architectural diagrams.
• Assist in onboarding applications and birthright access rules.

Conhecimentos

IAM/IGA

Java

Groovy

API testing

MongoDB/SQL

Active Directory

Azure AD

SSO

MFA

RBAC/ABAC

JML

Git

ITIL

OIDC/SAML/OAuth

Formação académica

Bachelor’s degree in CS/IT

Ferramentas

Cymmetri IDAM

Postman

SoapUI

MongoDB

SQL

Git

Azure AD

Descrição da oferta de emprego

We are seeking a motivated Identity and Access Management (IDAM) Engineer with approximately 4+ years of hands‑on experience in supporting and implementing IAM/IGA (Identity Governance and Administration) solutions. This role is critical for maintaining secure and compliant access to enterprise systems, ensuring smooth identity lifecycle operations, and enabling automation across IAM processes.

Key Responsibilities

• Provide daily operational support for IAM/IGA systems including:
• User onboarding/offboarding
• Role and entitlement management
• Access certification and review processes
• Customize or develop IAM workflows, connectors, and policies using Java and Groovy
• Design, develop, and maintain custom connectors for target application integrations
• Maintain and query identity data in MongoDB/SQL databases for troubleshooting and analytics
• Integrate with systems such as Active Directory, LDAP, Azure AD, and RESTful/SOAP APIs for identity provisioning and access control
• Configure and manage Single Sign‑On (SSO) and Multi‑Factor Authentication (MFA) integrations
• Work with SAML, OAuth 2.0, and OpenID Connect (OIDC) protocols for authentication and federation
• Design and implement Role‑Based Access Control (RBAC) and Attribute‑Based Access Control (ABAC) models
• Configure and manage access certification campaigns and periodic access reviews
• Collaborate with internal teams and stakeholders to troubleshoot access issues, perform root cause analysis, and resolve user account problems
• Perform application onboarding, including birthright access rules and entitlement mapping
• Ensure IAM policies and operations align with organizational security standards and compliance requirements (SOX, GDPR, ISO 27001, etc.)
• Document technical configurations, changes, architecture diagrams, and standard operating procedure
• Assist in incident response, root cause analysis, and continuous improvement efforts for IAM services
• Mentor junior team members and support knowledge transfer within the team

Required Skills & Qualifications

• 4+ years of experience in IAM/IGA support or implementation roles
• Hands‑on experience with Cymmetri IDAM tool preferred
• Proficient in Java for scripting, customization, and connector development within IAM platforms
• Strong hands‑on experience with Groovy scripting
• API development and API testing experience (Postman, SoapUI, or similar tools)
• Working knowledge of MongoDB/SQL – ability to write queries and investigate data issues
• Experience working with Active Directory and Azure AD for user creation, properties, group management, and authentication
• Familiarity with REST/SOAP APIs for system integration and automation
• Practical knowledge of SAML, OAuth 2.0, and OIDC protocols
• Experience configuring SSO and MFA solutions
• Understanding of RBAC/ABAC access models
• Hands‑on experience with Joiner‑Mover‑Leaver (JML) process
• Experience in user provisioning and de‑provisioning across multiple target systems
• Experience with access certification/access review campaign configuration
• Experience creating user manuals and technical documentation for end users
• Experience with UAT and production integration/deployment of applications
• Basic understanding of LDAP directory structures and schema
• Familiarity with version control tools (Git) and basic CI/CD concepts is a plus
• Strong problem‑solving skills with a security‑first mindset
• Clear and effective communication and documentation skills
• Experience with incident and change management processes (ITIL‑aligned)
• Bachelor’s degree in computer science, Information Technology, or related field (preferred)

Nice to Have

• Experience with Cymmetri IDAM tool
• Exposure to IAM tools like SailPoint, Saviynt, ForgeRock, or Okta
• Familiarity with ITIL practices
• Exposure to cloud platforms (Azure/AWS) for IAM deployments
• Basic scripting knowledge in Python or Shell
• Understanding of PAM (Privileged Access Management) concepts
• Basic understanding of IGA concepts – like Access Review, Provisioning, Deprovisioning etc