Staff IAM Engineer

ChargePoint; Gurugram District; On-site; INR 1,800,000 - 3,000,000; Full time

Job summary

ChargePoint is seeking an experienced IAM Engineer to lead enterprise identity strategy and platform architecture across cloud, on-premises, and hybrid environments in Gurgaon/Bangalore, India.

You will define architectures for secure authentication, establish agent identities, and implement advanced security controls while collaborating with security, infrastructure, and product teams to ensure reliability and compliance.

Qualifications

• 8-12 years of experience in IAM, cloud security, or cybersecurity engineering.
• Strong experience in Agentic AI IAM architecture, identity governance, secrets management, security engineering, and enterprise IAM program delivery.
• Strong expertise in requirement gathering, current-state assessments, gap analyses, control evaluations, and target-state Agentic AI IAM security architecture design.
• Experience securing cloud-native and hybrid environments and managing hybrid cloud IAM and secrets management programs.
• Knowledge of Zero Trust architecture and machine identity security.
• Experience implementing AI/Agentic security controls and secure automation frameworks.
• Platform experience: Microsoft Entra ID, Okta, HashiCorp Vault, AWS Secrets Manager, Google Cloud Secrets Manager, AWS, Azure, GCP, Kubernetes, container security platforms.
• Experience with Terraform, CI/CD, and DevSecOps tooling.
• Good to have: CISSP, CISM, CCSP.

Responsibilities

• Lead enterprise identity strategy and platform architecture across cloud, on-premises, and hybrid environments.
• Define reference architectures for secure authentication across CLI, browser, and agentic workflows.
• Establish agent identities as a foundational element within the identity platform for automated workflows.
• Build and implement advanced identity security controls such as Conditional Access, PIM, and risk-based authentication.
• Scale device management and identity governance to meet AI-powered operational needs.
• Drive IAM projects end-to-end from requirements to rollout and operation.

Skills

IAM architecture

OAuth/OIDC/SAML

Security governance

Requirement gathering

Education

Bachelor's degree in Cybersecurity, CS, IT, or related

Tools

Okta

AWS

Azure

Terraform

Kubernetes

HashiCorp Vault

GCP

Job description

Job Description:

About Us

With electric vehicles expected to be nearly 30% of new vehicle sales by 2025 and more than 50% by 2040, electric mobility is becoming a reality. ChargePoint (NYSE: CHPT) is at the center of this revolution, powering one of the world’s leading EV charging networks and a comprehensive set of hardware, software and mobile solutions for every charging need across North America and Europe. We bring together drivers, businesses, automakers, policymakers, utilities and other stakeholders to make e-mobility a global reality.

Since our founding in 2007, ChargePoint has focused solely on making the transition to electric easy for businesses, fleets and drivers. ChargePoint offers a once-in-a-lifetime opportunity to create an all-electric future and a trillion-dollar market.

At ChargePoint, we foster a positive and productive work environment by committing to live our values of Be Courageous, Charge Together, Love our Customers, Operate with Openness, and Relentlessly Pursue Awesome. These values guide how we show up every day, align, and work together to build a brighter future for all of us.

Join the team that is building the EV charging industry and make your mark on how people and goods will get everywhere they need to go, in any context, for generations to come.

Reports To

Senior Manager - AI & IT

What You Will Be Doing

ChargePoint is looking for a IAM Engineer to lead enterprise identity strategy and platform architecture across cloud, on-premises, and hybrid environments. This role owns cloud identity, directory services, Okta identity workflows, and the transition of applications to modern authentication standards (OAuth 2.0, OIDC, SAML). You will define and implement reference architectures for secure authentication across CLI, browser, and agentic workflows.
You will establish agent identities as a foundational element within the identity platform, enabling access control and auditability for automated and machine-assisted workflows. You will build and implement Conditional Access policies, Privileged Identity Management (PIM), risk-based authentication, and Okta Identity Governance (OIG) programs. You will also scale device management and identity governance systems to meet the demands of AI-powered operations while maintaining reliability, performance, and compliance across large organizational environments.
This is a hands-on technical role. You will code, design, and implement IAM solutions with deep knowledge in AWS, Azure, Teleport, and Terraform. You will partner with security, infrastructure, and product teams to align on architecture, build strategy, and operational ownership.
What You Will Bring to ChargePoint

• Lead enterprise identity strategy and platform architecture, encompassing cloud identity, directory services, and the transition of applications to modern authentication standards (OAuth 2.0, OIDC, SAML).
• Define and implement reference architectures for secure authentication across CLI, browser, and agentic workflows.
• Establish agent identities as a foundational element within the identity platform, enabling access control and auditability for automated and machine-assisted workflows.
• Build and implement advanced identity security controls such as Conditional Access policies, Privileged Identity Management (PIM), and risk-based authentication.
• Scale device management and identity governance systems to meet the demands of AI-powered operations. Ensure reliability, performance, and compliance across large organizational environments.
• Partner with security, infrastructure, and product teams to align on architecture, build strategy, and operational ownership.
• Drive IAM application development: code, design, and implement solutions with deep knowledge in AWS, Azure, Teleport, and Terraform. Deliver reliable solutions that keep engineering teams productive.
• Drive IAM projects end-to-end: take ambiguous access problems, define requirements, architect solutions, and own the rollout and operationalization - not just the design.
• Refine role design and access patterns across AWS, Kubernetes, SaaS, and internal systems - eliminate unnecessary privileges, reduce manual grants, and establish scalable baseline access.
• Run and improve user access reviews (UAR): develop, execute, and design a UAR process and solution that meets compliance requirements while improving real security signal - minimize approver burden through scoping, automation, and clear decision support.
• Identify high-risk permissions and misuse paths, build controls and mitigations, and drive adoption with partner teams to reduce risk exposure.
• Operate with strong security judgment and high signal: distinguish meaningful IAM risk from noise, gather context efficiently, and escalated with crisp rationale and actionable mitigations.
• Document and standardize the paved road: write procedures, runbooks, and automation so access decisions are consistent, scalable, and not dependent on tribal knowledge.
• Conduct Agentic AI IAM requirement analyses, architecture reviews, and security gap assessments across enterprise applications, cloud platforms, AI services, and infrastructure environments.
• Develop automation for access management and secrets lifecycle operations.
• Develop and implement security controls for AI agents, machine identities, APIs, workloads, and autonomous workflows.
• Lead enterprise Agentic AI IAM program execution across multiple workstreams.
• Establish security controls for AI agents, autonomous workflows, bots, and machine identities.
• Standardize identity governance across multi-cloud ecosystems.

Requirements

• Bachelors degree in Cybersecurity, Computer Science, Information Technology, or related discipline.
• 8-12 years of experience in IAM, cloud security, or cybersecurity engineering.
• Strong experience in Agentic AI IAM architecture, identity governance, secrets management, security engineering, and enterprise IAM program delivery.
• Strong expertise in requirement gathering, current-state assessments, gap analyses, control evaluations, and target-state Agentic AI IAM security architecture design.
• Experience securing cloud-native and hybrid environments and managing hybrid cloud IAM and secrets management programs.
• Knowledge of Zero Trust architecture and machine identity security.
• Experience implementing AI/Agentic security controls and secure automation frameworks.
• Platform experience: Microsoft Entra ID, Okta, HashiCorp Vault, AWS Secrets Manager, Google Cloud Secrets Manager, AWS, Azure, GCP, Kubernetes, container security platforms.
• Experience with Terraform, CI/CD, and DevSecOps tooling.
• Relevant certifications such as CISSP, CISM, or CCSP. (good to have)

Location
Gurgaon/Bangalore, India

We are committed to an inclusive and diverse team. ChargePoint is an equal opportunity employer. We do not discriminate based on race, color, ethnicity, ancestry, national origin, religion, sex, gender, gender identity, gender expression, sexual orientation, age, disability, veteran status, genetic information, marital status or any legally protected status.

If there is a match between your experiences/skills and the Company needs, we will contact you directly.

ChargePoint is committed to fostering an inclusive workplace that welcomes and supports all qualified individuals. In alignment with this commitment, we ensure that persons with disabilities are provided with reasonable accommodations throughout the employment process.

If you need a reasonable accommodation to participate in the application or interview process, to perform essential job functions, or to access any other benefits and privileges of employment, please contact us at [e-mail].

ChargePoint is an equal opportunity employer.
Applicants only - Recruiting agencies do not contact.