Senior IAM Engineer

Luxoft; Bengaluru; On-site; INR 3,200,000 - 4,600,000; Full time

Job summary

Luxoft in Bengaluru, India seeks a Senior Identity & Access Management Engineer with 8–10 years of hands-on IAM experience to design and implement complex SSO solutions and custom authentication flows. You will lead integrations with OneLogin and Entra ID, work on token design, and advance MFA and risk-based authentication across services.

The role requires deep protocol knowledge (OIDC/OAuth2/SAML), API-driven IAM workflows, and strong collaboration with security and engineering teams.

Qualifications

• 8–10 years of IAM engineering experience.
• Strong hands-on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.
• Solid infrastructure and development background, including TLS/certificate lifecycle management, DNS, reverse proxies, and load balancers.
• Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID.
• Experience with custom IAM solution development (APIs, SDKs, identity workflows).
• Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.
• Excellent oral and written communication skills.
• Ability to work cross‑functionally and explain complex issues in simple terms.
• Strong analytical and problem‑solving skills.
• Strong documentation and presentation abilities

Responsibilities

• Design and develop custom SSO/identity broker solutions, including non-standard authentication flows and legacy app integrations.
• Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
• Deep, protocol-level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers.
• Design and implementation of custom MFA and risk-based authentication flows.
• Experience with FIDO2 / WebAuthn, certificate-based authentication, or device trust models.
• Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.
• Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.
• Ability to perform authentication and authorization threat modeling.
• Collaborate with engineering, application, and security teams as the IAM SME.

Skills

SSO

OIDC

OAuth2

SAML

AuthID

MFA

OneLogin

Entra ID

FIDO2/WebAuthn

Threat modeling

Tools

OneLogin

Microsoft Entra ID

Okta

SCIM

JWT

Job description

We are seeking a highly skilled Senior Identity & Access Management (IAM) Engineer with 8–10 years of hands‑on experience. The candidate must possess strong expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID.

Responsibilities:

• Design and develop custom SSO/identity broker solutions, including non‑standard authentication flows and legacy app integrations
• Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
• Deep, protocol‑level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers
• Design and implementation of custom MFA and risk‑based authentication flows.
• Experience with FIDO2 / WebAuthn, certificate‑based authentication, or device trust models
• Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.
• Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.
• Ability to perform authentication and authorization threat modeling
• Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).

Mandatory Skills Description:

• 8–10 years of IAM engineering experience.
• Strong hands‑on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.
• Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers
• Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID.
• Experience with custom IAM solution development (APIs, SDKs, identity workflows).
• Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.
• Excellent oral and written communication skills.
• Ability to work cross‑functionally and explain complex issues in simple terms.
• Strong analytical and problem‑solving skills.
• Strong documentation and presentation abilities

Nice‑to‑Have Skills Description:

• Experience with OneLogin mappings, policies, and API-based integrations.
• Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity.
• Relevant certifications such as SC‑300, OneLogin Professional, CISSP.