Senior IAM Engineer

Luxoft; India; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Luxoft seeks a Senior IAM Engineer with 8–10 years of hands‑on experience to design and implement advanced IAM solutions. You will work on SSO, OIDC, MFA, and custom broker services, integrating OneLogin and Entra ID, and lead threat modeling across teams.

Responsibilities include crafting token‑based authentication flows, configuring MFA, and building IAM automation with Python/PowerShell. Strong communication and cross‑functional collaboration are essential.

Qualifications

• 8–10 years of IAM engineering experience.
• Strong hands‑on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.
• Solid infrastructure and development background including TLS/certificate lifecycle management, DNS, reverse proxies, and load balancers.
• Experience with OneLogin, Okta or Microsoft Entra ID.
• Strong scripting experience (Python, PowerShell, Bash).
• Experience with APIs/SDKs and identity workflows.
• Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.
• Excellent oral and written communication skills.
• Ability to work cross‑functionally and explain complex issues clearly.
• Strong analytical and problem‑solving skills.
• Strong documentation and presentation abilities.

Responsibilities

• Design and develop custom SSO/identity broker solutions, including non‑standard authentication flows and legacy app integrations.
• Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
• Deep understanding of OIDC, OAuth2, and SAML, including token design and custom authorization servers.
• Design and implementation of custom MFA and risk‑based authentication flows.
• Experience with FIDO2/WebAuthn, certificate‑based authentication, or device trust models.
• Create custom IAM workflows, automation scripts, and API integrations using Python/PowerShell/Shell.
• Assess IAM security threats such as token replay and session fixation.
• Perform authentication and authorization threat modeling.
• Collaborate with engineering, application, and security teams as IAM SME.

Skills

IAM engineering

SSO/OIDC/OAuth2/SAML

OneLogin/Entra ID/Okta

Scripting (Python/PowerShell/Bash)

APIs/SDKs/identity workflows

SCIM/JWT/CA policies

TLS/certificate lifecycle

Documentation & presentation

Cross-functional collaboration

Analytical problem solving

Tools

OneLogin

Microsoft Entra ID

Okta

Job description

Project description

We are seeking a highly skilled Senior Identity & Access Management (IAM) Engineer with 8–10 years of hands‑on experience. The candidate must possess strong expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID.

Responsibilities

• Design and develop custom SSO/identity broker solutions, including non‑standard authentication flows and legacy app integrations
• Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
• Deep, protocol‑level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers
• Design and implementation of custom MFA and risk‑based authentication flows.
• Experience with FIDO2 / WebAuthn, certificate‑based authentication, or device trust models
• Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.
• Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.
• Ability to perform authentication and authorization threat modeling
• Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).

SKILLS

Must have

• 8–10 years of IAM engineering experience.
• Strong hands‑on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.
• Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers
• Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID.
• Strong scripting experience (Python, PowerShell, Bash).
• Experience with custom IAM solution development (APIs, SDKs, identity workflows).
• Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.
• Excellent oral and written communication skills.
• Ability to work cross‑functionally and explain complex issues in simple terms.
• Strong analytical and problem‑solving skills.
• Strong documentation and presentation abilities

Nice to have

• Experience with OneLogin mappings, policies, and API-based integrations.
• Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity.
• Relevant certifications such as SC-300, OneLogin Professional, CISSP.