Senior IAM Engineer

Fanatics Betting & Gaming; Hyderabad; On-site; INR 1,700,000 - 2,500,000; Full time

Job summary

Fanatics Commerce is seeking an IAM Engineer to design, implement, and manage scalable identity and access solutions across its global platform. The role focuses on federation, PAM, authentication, certificate management, and provisioning, delivering secure, streamlined access for fans and internal teams.

You will lead IAM initiatives, drive vendor collaborations, and advance adaptive MFA, RBAC/ABAC, and zero-trust security across cloud and on‑prem environments while aligning with CI/CD

Qualifications

• 5+ years designing and managing enterprise IAM solutions.
• Hands-on with PAM platforms (CyberArk/Delinea/BeyondTrust).
• Experience with Okta, SAML, OIDC, OAuth.
• Strong PKI and TLS/certificates knowledge.

Responsibilities

• Own the IAM strategy, planning, development, and support of IAM solutions.
• Lead federation, PAM, authentication, certificate management, and provisioning processes.
• Drive IAM implementations with buy vs. build decisions and architectural direction.
• Define least-privilege access model and generate audit evidence for SOC 2 and PCI DSS.
• Onboard new applications into Okta and manage identity lifecycle across systems.
• Develop automated TLS/SSL certificate renewal pipelines integrated with CI/CD tooling.
• Collaborate with vendors and business partners to advance the IAM program.

Skills

IAM design

PAM platforms

CyberArk

Delinea

BeyondTrust

SSO

Okta

SAML

OIDC

OAuth

Active Directory

Terraform

Ansible

CI/CD tooling

Tools

Terraform

Ansible

CI/CD tooling

Job description

Fanatics Commerce is the global leader in licensed sports merchandise, operating a vertically integrated platform that designs, manufactures, and delivers officially licensed apparel, jerseys, headwear, and collectibles for major leagues, teams, and events worldwide. With more than 900 e-commerce sites and a global omnichannel presence across digital, in-venue, and retail, Fanatics Commerce reaches fans in over 180 countries and powers official fan experiences for many of the world’s most iconic sports properties.

At Fanatics, we bring our BOLD Leadership Principles to life every day - building championship teams, obsessing over fans, acting with entrepreneurial speed, and delivering with a determined and relentless mindset.

As we continue to scale our global platform, the IAM Engineer will play a critical role in building scalable, automated identity and access security capabilities across Fanatics Commerce.

ROLE OVERVIEW

We’re looking for an IAM Engineer who places a strong emphasis on usable security and scaling successfully through automation — keeping pace with Fanatics Commerce’s rapid growth without disrupting innovation. In this role, you will own the overall strategy, planning, development, and support of Fanatics’ IAM solutions and associated processes, providing direction across federation, privileged access management, authentication and authorization, certificate management, and identity provisioning. The IAM Engineer delivers business and fan impact through BOLD leadership and execution excellence, leveraging data, automation, and AI-enabled insights.

HOW WILL YOU DRIVE IMPACT

Success is measured by the ability to deliver results through BOLD capabilities and measurable outcomes.

Team & Leadership Impact (Build Championship Teams)

• Partner closely with service desk, systems engineering, network security, audit, application developers, and other engineers to design and maintain functional, scalable, and secure IAM operations.
• Act as the functional technical leader during IAM implementations, driving technology selection — including buy vs. build decisions — and setting engineering direction for the team.
• Collaborate with vendors and business partners to develop, implement, and manage the IAM program, and work directly with business lines on integration requirements including provisioning, deprovisioning, and identity lifecycle.

Fan & Customer Impact (Obsessed with Fans)

• Define and enforce a least-privilege access security model across all systems and platforms, reducing risk exposure for users and fans across Fanatics Commerce’s digital ecosystem.
• Produce privileged access usage reports and support audit evidence requests for SOC 2, PCI DSS, and ITGC controls, ensuring trust and compliance at scale.
• Partner with application and engineering teams to onboard new applications into Okta, enabling secure and seamless user experiences across internal tools and fan-facing platforms.
• Support emerging identity controls for AI agents and machine identities, including scoped OAuth tokens and service-to-service authentication, to safeguard next-generation platform capabilities.

Innovation & Problem Solving (Limitless Entrepreneurial Spirit)

• Identify, evaluate, and drive decision-making around new and emerging IAM technologies, including CIEM, ITDR, and IGA platforms, establishing strategy, implementation, and operationalization roadmaps.
• Build automated monitoring and renewal pipelines for TLS/SSL certificate lifecycle management, eliminating expiration-driven outages and integrating with CyberArk and internal CI/CD tooling.
• Implement adaptive MFA, conditional access policies, and passwordless authentication initiatives, advancing Fanatics’ Zero Trust security posture.
• Develop enterprise-wide IAM standards and strategy roadmaps, including RBAC/ABAC models and provisioning integrations connecting HR systems, Active Directory, and downstream applications.

Ownership & Execution (Determined & Relentless Mindset)

• Own the full PAM platform lifecycle — including safe design, policy configuration, session isolation, automated password/secret rotation, and just-in-time access workflows — to reduce standing privilege across the organization.
• Manage issuance, renewal, revocation, and inventory of internal and external TLS/SSL certificates across cloud and on-premises environments, maintaining PKI hygiene aligned to industry best practice.
• Implement and coordinate remediation required by policies, standards, reviews, and audits, documenting exceptions as necessary and maintaining run books and incident response procedures.
• Evaluate and monitor project efforts, timelines, and task management to ensure IAM initiatives are delivered on time and to standard.

AI & DIGITAL CAPABILITY

We are building a future-ready organization. This role is expected to:

• Apply AI and technology to improve efficiency, quality, and outcomes
• Use data and digital tools to inform decisions and enhance performance
• Demonstrate curiosity and adaptability in adopting new technologies and ways of working
• Contribute to a culture of innovation and continuous improvement

CAPABILITIES & EXPERIENCE YOU BRING

Required Qualifications:

• A minimum of 5 years of experience designing, implementing, and managing complex IAM solutions, with expertise in PAM platforms such as CyberArk, Delinea, or BeyondTrust in enterprise environments.
• Proficiency in SSO and identity protocols including Okta administration, SAML, OIDC, OAuth, Active Directory, and LDAP, with hands‑on experience implementing adaptive MFA and conditional access policies.
• Strong understanding of identity lifecycle management for privileged and service accounts, including credential rotation, just‑in‑time access, and Zero Trust security principles.
• Working knowledge of certificate management and PKI concepts — including TLS, CA hierarchies, and key rotation — with experience building automated renewal pipelines integrated into CI/CD tooling.
• Experience with CIEM, ITDR, and IGA platforms, and familiarity with emerging authorization mechanisms based on Zanzibar/ReBAC.
• Proficiency with cloud technologies (AWS, Azure, GCP, or OCI), configuration management tools such as Terraform or Ansible, DevOps tools (