Systems Engineering Senior Specialist

NTT DATA BUSINESS SOLUTIONS; Dadri; On-site; INR 900,000 - 1,400,000; Full time

Job summary

NTT DATA BUSINESS SOLUTIONS in Noida is seeking an IAM Engineer to design, implement, and maintain secure authentication and authorization solutions. The role focuses on Microsoft Entra ID, MFA, SSO integrations, and API-based identity automation to strengthen Zero Trust posture.

You will administer Entra ID tenants, configure Conditional Access, manage certificates and token lifetimes, and automate identity tasks with Graph API and PowerShell.

Qualifications

• Experience designing and implementing IAM solutions for enterprise environments.
• In-depth knowledge of Azure AD/Entra ID and MFA best practices.
• Hands-on experience with SSO protocols (SAML, OAuth2, OIDC, WS-Federation).
• Proficiency with PowerShell, Graph API, and RESTful services.
• Strong governance and Privileged Access Management familiarity.
• Understanding of AD/ADFS, DNS, and certificate services.

Responsibilities

• Design, implement, and maintain Entra ID authentication and access controls.
• Configure Conditional Access and Identity Protection across tenants.
• Integrate SaaS apps via SSO and manage certificates and token lifetimes.
• Automate identity tasks using Graph API and REST endpoints.
• Collaborate with security and IT teams to support zero trust initiatives.

Skills

Microsoft Entra ID (Azure AD)

MFA, SSO, Conditional Access, Identity

SAML 2.0, OAuth2, OpenID Connect, WS-F

PowerShell, Microsoft Graph API, REST

Zero Trust, identity governance, and P

Active Directory, DNS, certificates, A

Job description

Job Summary

The Identity Access Management (IAM) Engineer is responsible for designing, implementing, and maintaining secure authentication and authorization solutions across the enterprise. This role focuses on Microsoft Entra ID (Azure AD), Multi-Factor Authentication (MFA), Single Sign-On (SSO) integrations, and API-based identity automation. The engineer ensures secure, seamless access to applications while strengthening the organization's Zero Trust posture in Noida.

Key Responsibilities

• Microsoft Entra ID (Azure AD) Administration: Manage and optimize Entra ID tenants, identity governance, and lifecycle workflows; Configure Conditional Access, Identity Protection, PIM, and authentication policies; Implement and maintain Entra ID Connect, cloud sync, and federation configurations; Monitor identity security posture using Entra ID security tools and logs.
• MFA Authentication Security: Deploy and manage MFA solutions (Microsoft Authenticator, FIDO2, SMS/Voice, etc.); Enforce adaptive MFA policies aligned with Zero Trust principles; Troubleshoot MFA failures, token issues, and authentication flow problems; Evaluate and implement passwordless authentication strategies.
• Single Sign-On (SSO) Integrations: Integrate enterprise and SaaS applications using SAML, OAuth2, OIDC, and WS-Federation; Configure enterprise app registrations, service principals, and consent policies; Maintain SSO certificates, token lifetimes, and application access policies; Work with vendors to onboard new applications into SSO.
• API Automation: Develop and maintain automation using Microsoft Graph API, PowerShell, and REST APIs; Build workflows for user provisioning, deprovisioning, and access governance; Automate identity reporting, auditing, and compliance tasks; Integrate identity services with ITSM tools (ServiceNow, Jira, etc.).
• Security, Compliance Governance: Implement identity governance (IGA) controls: access reviews, entitlement management, lifecycle workflows; Ensure compliance with internal security standards and external regulations (ISO, SOC2, GDPR); Conduct periodic audits of roles, permissions, and privileged access; Collaborate with cybersecurity teams on incident response and threat mitigation.
• Troubleshooting Support: Provide L3 support for authentication, SSO, and identity-related incidents; Analyze logs from Entra ID, Graph API, and SIEM tools to resolve issues; Document solutions, runbooks, and architectural diagrams.

Required Skills Experience

Technical Skills

• Microsoft Entra ID (Azure AD)
• MFA, SSO, Conditional Access, Identity Protection
• SAML 2.0, OAuth2, OpenID Connect, WS-Federation
• PowerShell, Microsoft Graph API, REST APIs
• Zero Trust, identity governance, and privileged access management
• Active Directory, DNS, certificates, and federation services (ADFS)

Soft Skills

• Strong analytical and problem-solving abilities
• Excellent communication and documentation skills
• Ability to collaborate with cross-functional teams
• Ownership mindset and attention to detail

Preferred Qualifications

• Microsoft certifications (SC300, AZ-104, AZ-500, MS-100/MS-101)
• Experience with Entra ID Governance, SailPoint, Okta, or similar IAM tools
• Background in cybersecurity or cloud security engineering