Senior Consultant (IDAM)

Tribastion Technologies Pvt. Ltd.; Mumbai; On-site; INR 1,000,000 - 1,800,000; Full time

Job summary

Tribastion Technologies Pvt. Ltd. is seeking an experienced Identity and Access Management (IDAM) Engineer with 4+ years of hands-on IAM/IGA experience to support and implement IAM/IGA solutions.

You will handle onboarding, role management, and access reviews across enterprise systems while developing connectors and workflows using Java and Groovy. The role requires strong knowledge of Active Directory/Azure AD, SSO/MFA configurations, and standard IAM protocols (SAML, OAuth 2.0, OIDC).

Qualifications

• 4+ years in IAM/IGA support or implementation roles.
• Hands-on experience with Cymmetri IDAM tool preferred.
• Proficient in Java for scripting, customization, and connector development within IAM platforms.
• Strong hands-on experience with Groovy scripting.
• API development and API testing experience (Postman, SoapUI, or similar tools).
• Working knowledge of MongoDB/SQL – ability to write queries and investigate data issues.
• Experience working with Active Directory and Azure AD for user creation, properties, group management, and authentication.
• Familiarity with REST/SOAP APIs for system integration and automation.
• Practical knowledge of SAML, OAuth 2.0, and OIDC protocols.
• Experience configuring SSO and MFA solutions.
• Understanding of RBAC/ABAC access models.
• Hands-on experience with Joiner-Mover-Leaver (JML) process.
• Experience in user provisioning and de-provisioning across multiple target systems.
• Experience with access certification/access review campaign configuration.
• Experience creating user manuals and technical documentation for end users.
• Experience with UAT and production integration/deployment of applications.
• Basic understanding of LDAP directory structures and schema.
• Familiarity with version control tools (Git) and basic CI/CD concepts is a plus.
• Strong problem-solving skills with a security-first mindset.
• Clear and effective communication and documentation skills.
• Experience with incident and change management processes (ITIL-aligned).
• Bachelor’s degree in computer science, Information Technology, or related field (preferred).

Responsibilities

• Provide daily operational support for IAM/IGA systems including onboarding and offboarding users.
• Manage roles and entitlements; conduct access certification and reviews.
• Develop or customize IAM workflows, connectors, and policies using Java and Groovy.
• Design and maintain custom connectors for target application integrations.
• Query identity data in MongoDB/SQL for troubleshooting and analytics.
• Integrate with Active Directory, LDAP, Azure AD, and RESTful/SOAP APIs for provisioning and access control.
• Configure SSO and MFA integrations; work with SAML, OAuth 2.0, and OIDC protocols.
• Design RBAC and ABAC models; configure access review campaigns.
• Collaborate with teams to troubleshoot access issues and perform root cause analysis.
• Handle journeyman tasks like birthright access rules and entitlement mapping.
• Ensure IAM policies align with SOX, GDPR, ISO 27001; document configurations and architectures.
• Assist in incident response and continuous improvement for IAM services.
• Mentor junior members and support knowledge transfer.

Skills

IAM/IGA

Java scripting

Groovy scripting

API development

MongoDB/SQL queries

Active Directory/Azure AD

REST/SOAP APIs

SAML/OIDC

SSO/MFA configuration

RBAC/ABAC

Joiner-Mover-Leaver (JML)

User provisioning/deprovisioning

Incident response

Documentation

ITIL concepts

Security mindset

Communication

Git/CI/CD basics

Problem solving

Scripting in Java

Education

Bachelor's degree in CS/IT

Tools

Cymmetri IDAM

Git

Postman

SoapUI

Azure AD

SailPoint

Okta

Job description

We are seeking a motivated Identity and Access Management (IDAM) Engineer with approximately 4+ years of hands-on experience in supporting and implementing IAM/IGA (Identity Governance and Administration) solutions. This role is critical for maintaining secure and compliant access to enterprise systems, ensuring smooth identity lifecycle operations, and enabling automation across IAM processes.

Key Responsibilities

• Provide daily operational support for IAM/IGA systems including:
• User onboarding/offboarding
• Role and entitlement management
• Access certification and review processes
• Customize or develop IAM workflows, connectors, and policies using Java and Groovy
• Design, develop, and maintain custom connectors for target application integrations
• Maintain and query identity data in MongoDB/SQL databases for troubleshooting and analytics
• Integrate with systems such as Active Directory, LDAP, Azure AD, and RESTful/SOAP APIs for identity provisioning and access control
• Configure and manage Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integrations
• Work with SAML, OAuth 2.0, and OpenID Connect (OIDC) protocols for authentication and federation
• Design and implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models
• Configure and manage access certification campaigns and periodic access reviews
• Collaborate with internal teams and stakeholders to troubleshoot access issues, perform root cause analysis, and resolve user account problems
• Perform application onboarding, including birthright access rules and entitlement mapping
• Ensure IAM policies and operations align with organizational security standards and compliance requirements (SOX, GDPR, ISO 27001, etc.)
• Document technical configurations, changes, architecture diagrams, and standard operating procedure
• Assist in incident response, root cause analysis, and continuous improvement efforts for IAM services
• Mentor junior team members and support knowledge transfer within the team

Required Skills & Qualifications

• 4+ years of experience in IAM/IGA support or implementation roles
• Hands‑on experience with Cymmetri IDAM tool preferred
• Proficient in Java for scripting, customization, and connector development within IAM platforms
• Strong hands‑on experience with Groovy scripting
• API development and API testing experience (Postman, SoapUI, or similar tools)
• Working knowledge of MongoDB/SQL – ability to write queries and investigate data issues
• Experience working with Active Directory and Azure AD for user creation, properties, group management, and authentication
• Familiarity with REST/SOAP APIs for system integration and automation
• Practical knowledge of SAML, OAuth 2.0, and OIDC protocols
• Experience configuring SSO and MFA solutions
• Understanding of RBAC/ABAC access models
• Hands‑on experience with Joiner‑Mover‑Leaver (JML) process
• Experience in user provisioning and de‑provisioning across multiple target systems
• Experience with access certification/access review campaign configuration
• Experience creating user manuals and technical documentation for end users
• Experience with UAT and production integration/deployment of applications
• Basic understanding of LDAP directory structures and schema
• Familiarity with version control tools (Git) and basic CI/CD concepts is a plus
• Strong problem‑solving skills with a security‑first mindset
• Clear and effective communication and documentation skills
• Experience with incident and change management processes (ITIL‑aligned)
• Bachelor’s degree in computer science, Information Technology, or related field (preferred)

Nice to Have

• Experience with Cymmetri IDAM tool
• Exposure to IAM tools like SailPoint, Saviynt, ForgeRock, or Okta
• Familiarity with ITIL practices
• Exposure to cloud platforms (Azure/AWS) for IAM deployments
• Basic scripting knowledge in Python or Shell
• Understanding of PAM (Privileged Access Management) concepts
• Basic understanding of IGA concepts – like Access Review, Provisioning, Deprovisioning etc