Senior IAM Engineer

Statusneo Technology Consulting; Bengaluru; Hybrid; INR 3,500,000 - 6,000,000; Full time

Job summary

Statusneo Technology Consulting in Bangalore is seeking a Senior IAM Engineer with extensive hands-on expertise in SSO, OIDC, MFA, and custom IAM solutions. You will design and implement secure identity broker integrations, leveraging OneLogin and Entra ID within a hybrid work setting.

You will work across authentication protocols, token management, and risk-based MFA, while crafting IAM workflows via Python/PowerShell scripts and APIs.

Qualifications

• We require 7–10 years of IAM engineering experience.
• Hands-on expertise with SSO, OIDC, OAuth2, SAML, MFA and AuthID.
• Strong scripting and API/SDK usage for custom IAM workflows.

Responsibilities

• Design and develop custom SSO/identity broker solutions, including nonstandard auth flows.
• Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
• Deep understanding of OIDC, OAuth2, SAML, token design, signing and encryption.
• Develop custom MFA and risk-based auth flows, with FIDO2/WebAuthn experience preferred.
• Create IAM workflows and API integrations using Python/PowerShell/Shell scripting.
• Threat modeling for authentication/authorization and collaboration with security teams.
• Collaborate with engineering, application, and security teams as IAM SME.

Skills

SSO/OIDC/OAuth2

MFA

AuthID

SAML

OneLogin

Okta

Entra ID

Python

PowerShell

Bash

Identity APIs/SDKs

SCIM

JWT

Conditional Access

Identity Lifecycle

TLS Lifecycle

DNS

Reverse Proxies

Load Balancers

Tools

OneLogin

Okta

Entra ID

Job description

Role: Senior IAM Engineer

Location: Bangalore, India (Hybrid)

Duration: Full-time (Permanent)

Job Summary

Position Overview

We are seeking a highly skilled Senior Identity & Access Management (IAM) Engineer with 710 years of hands-on experience. The candidate must possess strong expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID.

Key Responsibilities

• Design and develop custom SSO/identity broker solutions, including nonstandard authentication flows and legacy app integrations
• Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
• Deep, protocollevel understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers
• Design and implementation of custom MFA and riskbased authentication flows.
• Experience with FIDO2 / WebAuthn, certificatebased authentication, or device trust models
• Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.
• Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.
• Ability to perform authentication and authorization threat modeling
• Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).

Required Skills

• 7–10 years of IAM engineering experience.
• Strong hands-on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.
• Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers
• Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID.
• Strong scripting experience (Python, PowerShell, Bash).
• Experience with custom IAM solution development (APIs, SDKs, identity workflows).
• Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.

Soft Skills

• Excellent oral and written communication skills.
• Ability to work cross-functionally and explain complex issues in simple terms.
• Strong analytical and problem-solving skills.
• Strong documentation and presentation abilities

Preferred Qualifications

Experience with OneLogin mappings, policies, and API-based integrations.

Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity.

Relevant certifications such as SC-300, OneLogin Professional, CISSP.