Systems Engineer 2

Tesco India; Bengaluru; On-site; INR 1,500,000 - 2,000,000; Full time

Job summary

Tesco India is looking for a Senior IAM Engineer who will focus on designing and implementing secure Single Sign On (SSO) solutions. The ideal candidate will have significant experience with Microsoft Entra ID, Okta, and OneLogin, as well as strong scripting abilities in Python and PowerShell.

This position involves working closely with various teams to deliver secure identity solutions, managing integrations, and ensuring best security practices are followed. A commitment to excellence in identity management is essential for success in this role.

Qualifications

• 7–10 years of hands on experience in IAM or security engineering.
• Proven experience developing custom SSO plugins.
• Strong scripting skills with Python and PowerShell.

Responsibilities

• Design, build, and support SSO integrations using Microsoft Entra ID, Okta, or OneLogin.
• Implement and troubleshoot SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM integrations.
• Ensure IAM implementations follow security best practices.

Skills

Identity and Access Management (IAM)

SSO with Azure Entra ID

Scripting with Python

PowerShell scripting

REST APIs

Tools

Microsoft Entra ID

Okta

OneLogin

Job description

We are looking for a Senior IAM Engineer who is deeply hands on and passionate about building secure, scalable Single Sign On (SSO) and identity orchestration solutions. This is a pure individual contributor role focused on design, integration, automation, and troubleshooting—ideal for engineers who enjoy solving complex identity and authentication challenges in enterprise environments.

You will work closely with application, platform, and security teams to deliver robust identity solutions using Microsoft Entra ID, Okta, or OneLogin, while leveraging strong scripting, API, and infrastructure fundamentals.

Responsibilities

• Design, build, and support SSO integrations using Microsoft Entra ID, Okta, or OneLogin.
• Develop and maintain custom SSO plugins and connectors for internal and third party applications.
• Implement and troubleshoot SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and SCIM integrations.
• Build and manage identity orchestration workflows for user provisioning, de provisioning, and access lifecycle management.
• Integrate IAM platforms with applications and services using REST APIs.
• Create and maintain scripts using Python and PowerShell to support IAM operations and automation.
• Work with infrastructure components such as TLS and certificate lifecycle management.
• Support SSO integrations involving DNS, reverse proxies, load balancers, and network security controls.
• Ensure IAM implementations follow security best practices and enterprise standards.

Qualifications

• 7–10 years of hands on experience in Identity and Access Management (IAM) or security engineering roles.
• Strong, practical experience implementing SSO with Azure Entra ID.
• Proven experience developing custom SSO plugins or integrations.
• Solid understanding of identity orchestration concepts and user lifecycle management.
• Strong scripting skills with Python and PowerShell.
• Experience working with REST APIs for identity and application integrations.
  • Hands on experience with at least 2 SSO platform - Microsoft Entra ID, Okta, OneLogin.
• Strong infrastructure fundamentals, including:
  • TLS / certificate lifecycle management
  • DNS
  • Reverse proxies
  • Load balancers