Manager - Identity and Access Management

Threadneedle group; Hinoba-an; Hybrid; PHP 2,639,000 - 4,618,000; Full time

Job summary

Ameriprise India LLP seeks an IAM Engineering Manager with deep Azure Cloud and identity expertise to lead enterprise IAM operations. You will drive automation, governance, and secure access across Azure and AWS, coordinating with global teams and delivering resilient identity services.

The role requires hands-on implementation, incident management, and strong leadership to support critical identity platforms in a hybrid in-office environment in India.

Qualifications

• 14+ years of IT experience with 10+ years in IAM and 3+ years leading IAM teams.
• Hands-on with Azure Entra ID, Azure MFA, Conditional Access, and IAM governance.
• Experience with 24x7 production support and cloud identity modernization.

Responsibilities

• Own and lead 24x7 operational support of the enterprise IAM platform.
• Provide end-to-end IAM infrastructure support, including Azure AD, IDM, and MFA.
• Ensure SLA/SLO adherence, incident response, and change control processes.
• Lead major incident management, post-incident reviews, and preventive actions.
• Automate operational tasks using PowerShell, Terraform, and IaC practices.
• Coordinate with global teams for seamless IAM platform support.

Skills

Azure

IAM

SiteMinder

API Gateway

Entra ID

Azure MFA

SAML/OIDC

Terraform

Kubernetes

Tools

Terraform

ARM/Bicep

Job description

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection. Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Job Description

Looking for a highly skilled IAM Engineering Manager with deep expertise in Microsoft Azure Cloud, Identity and Access Management (IAM), and enterprise security platforms. The ideal candidate will have strong hands‑on experience in Azure implementation, configuration, development, automation, and production support, along with expertise in Broadcom SiteMinder SSO, Broadcom API Gateway, Identity Management (IDM), Authentication, Authorization, Federation, and Access Governance solutions.

Key Responsibilities

• Own and lead 24x7 operational support of the enterprise IAM platform, ensuring high availability, stability, performance, and compliance of critical identity services.
• Provide end‑to‑end platform support for IAM infrastructure, including Broadcom SiteMinder, API Gateway, Identity Manager (IDM), Azure Entra ID, Active Directory, Authentication, and Access Management services.
• Ensure adherence to service availability, SLA, SLO, incident response, problem management, and change management processes for all IAM shared services.
• Lead Major Incident (P1/P2) management, root cause analysis, post‑incident reviews, and implementation of preventive measures.
• Monitor, maintain, and optimize IAM infrastructure health through proactive capacity management, performance tuning, health checks, and operational automation.
• Drive operational excellence by reducing MTTR, improving platform reliability, and automating routine support and maintenance activities.
• Manage support for cloud‑based IAM services across Azure and AWS, including identity lifecycle management, federation, MFA, Conditional Access, Privileged Access, and governance solutions.
• Coordinate with global infrastructure, cloud, security, and application teams to ensure seamless support for business‑critical IAM platforms and services.
• Participate in rotational on‑call support and provide leadership during critical production events, outages, disaster recovery exercises, and platform upgrades.
• Establish and maintain operational runbooks, knowledge articles, support procedures, recovery plans, and platform documentation.
• Drive IAM automation using PowerShell, Terraform, Azure Automation, ARM/Bicep templates, and Infrastructure as Code (IaC) practices.
• Lead cloud authentication and authorization integrations leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and JWT‑based security models.
• Support cloud security initiatives involving Zero Trust Architecture, Adaptive Access Controls, Risk‑Based Authentication, and Identity Threat Detection.

Required Qualifications

• 14+ years of overall IT experience with at least 10+ years in Identity & Access Management and 3+ years leading IAM Engineering, Operations, or Platform Support teams in enterprise‑scale environments.
• Experience with Azure, Enterprise‑scope IAM Platforms, 24x7 production support, cloud identity modernization, and people leadership.
• Hands‑on experience with Microsoft Entra ID (Azure AD), Azure MFA, Conditional Access, Identity Governance, PIM, Access Reviews, Entitlement Management, and B2B/B2C identity solutions.

Preferred Qualifications

• Strong expertise in AWS IAM, AWS Organizations, IAM Roles, Identity Federation, AWS SSO/Identity Center, and cloud security best practices.
• Experience with modern IAM platforms such as Okta, Ping Identity, SailPoint, CyberArk, Saviynt, ForgeRock, Microsoft Entra ID, and Broadcom IAM Suite.
• Experience implementing SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, Kerberos, LDAP, and REST API security frameworks.
• Experience with Infrastructure as Code (IaC) tools including Terraform, Ansible, ARM, and Bicep.
• Experience supporting cloud‑native workloads on Azure and AWS, including Kubernetes, AKS, EKS, Docker, and container security.
• Knowledge of Zero Trust security architecture, Identity Security, PAM, CIEM (Cloud Infrastructure Entitlement Management), and Identity Governance & Administration (IGA).
• Experience with cloud monitoring and observability platforms such as Azure Monitor, Log Analytics, Application Insights, Dynatrace, Splunk, and Sumo Logic.
• Azure certifications such as AZ‑104, AZ‑305, AZ‑500, SC‑300, SC‑100 and AWS certifications are highly preferred.

In-Office Collaboration

We are a client‑centric, relationship‑based business. Working together, in‑person, is foundational to how we achieve results. By fostering a culture of face‑to‑face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in‑office time or different in‑office expectations, and specific requirements will be discussed during the hiring process.

Full-Time/Part-Time

Full time Timings (2:00p‑10:30p) India Business Unit AWMPO AWMP&S President's Office Job Family Group Technology

Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law. We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.