Systems Engineer 2

Tesco Technology; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Tesco Technology is looking for a Senior IAM Engineer located in Bengaluru, India. This role emphasizes the design, integration, and automation of secure Single Sign On (SSO) and identity orchestration solutions. The successful candidate will work collaboratively with application and security teams to develop identity solutions using platforms like Microsoft Entra ID, Okta, and OneLogin.

Ideal candidates should possess 7–10 years of experience in Identity and Access Management, with strong practical skills in SSO implementation and scripting in Python and PowerShell. Key responsibilities include building and managing identity workflows, integrating IAM platforms, and ensuring security best practices.

Qualifications

• 7–10 years of hands-on experience in IAM or security engineering roles.
• Strong practical experience implementing SSO with Azure Entra ID.
• Proven experience developing custom SSO plugins or integrations.
• Strong scripting skills with Python and PowerShell.
• Hands-on experience with at least two SSO platforms.

Responsibilities

• Design, build, and support SSO integrations using Microsoft Entra ID, Okta, or OneLogin.
• Develop and maintain custom SSO plugins and connectors.
• Implement and troubleshoot SAML 2.0, OAuth 2.0, OpenID Connect, and SCIM integrations.
• Build and manage identity orchestration workflows.

Skills

Implementation of SSO

Identity orchestration concepts

Scripting skills (Python, PowerShell)

Experience with REST APIs

Tools

Microsoft Entra ID

Okta

OneLogin

Job description

Overview

Senior IAM Engineer role focused on design, integration, automation, and troubleshooting of secure, scalable Single Sign On (SSO) and identity orchestration solutions. The candidate will work closely with application, platform, and security teams to deliver robust identity solutions using Microsoft Entra ID, Okta, or OneLogin, leveraging scripting, API, and infrastructure fundamentals.

Responsibilities

• Design, build, and support SSO integrations using Microsoft Entra ID, Okta, or OneLogin.
• Develop and maintain custom SSO plugins and connectors for internal and third-party applications.
• Implement and troubleshoot SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM integrations.
• Build and manage identity orchestration workflows for user provisioning, de-provisioning, and access lifecycle management.
• Integrate IAM platforms with applications and services using REST APIs.
• Create and maintain scripts using Python and PowerShell to support IAM operations and automation.
• Work with infrastructure components such as TLS and certificate lifecycle management.
• Support SSO integrations involving DNS, reverse proxies, load balancers, and network security controls.
• Ensure IAM implementations follow security best practices and enterprise standards.

Qualifications

• 7–10 years of hands-on experience in Identity and Access Management (IAM) or security engineering roles.
• Strong, practical experience implementing SSO with Azure Entra ID.
• Proven experience developing custom SSO plugins or integrations.
• Solid understanding of identity orchestration concepts and user lifecycle management.
• Strong scripting skills with Python and PowerShell.
• Experience working with REST APIs for identity and application integrations.
• Hands-on experience with at least two SSO platforms (Microsoft Entra ID, Okta, OneLogin).
• Strong infrastructure fundamentals, including TLS/certificate lifecycle management, DNS, reverse proxies, and load balancers.