Senior IAM Engineer – SSO & MFA

Senior IAM Engineer – SSO & MFA
Location: Pune / Chennai – Hybrid
Experience: 8–14 Years
Open Position: 1
Notice Period: 15 Days
Role Overview:
We are looking for an experienced IAM Engineer to design, implement, troubleshoot and manage enterprise Identity and Access Management solutions, with a strong focus on SSO and MFA. The role will provide L3/SME-level support and work closely with application, infrastructure, security and vendor teams.
Key Responsibilities:
Provide L3 technical support for SSO, MFA and identity authentication issues.
Manage and troubleshoot IAM platforms including Active Directory and Microsoft Entra ID.
Design and implement SSO integrations for enterprise and SaaS applications.
Configure and troubleshoot SAML 2.0, OAuth 2.0 and OIDC.
Manage Entra ID Enterprise Applications, App Registrations and Service Principals.
Implement and manage MFA and Conditional Access policies.
Troubleshoot authentication issues involving claims, tokens, certificates, federation and application configurations.
Perform application onboarding including requirement gathering, configuration, testing, UAT and production implementation.
Monitor authentication activity and investigate failures using Entra ID logs and security monitoring tools.
Work with application owners and vendors to resolve authentication and integration issues.
Support identity federation and SaaS application integrations.
Automate repetitive IAM/SSO/MFA activities using PowerShell or scripting.
Maintain technical documentation, troubleshooting guides and operational procedures.
Support major incidents and provide root-cause analysis.
Provide technical guidance to L2 IAM engineers.
Ensure IAM solutions follow security, compliance and Zero Trust principles.
Required Skills:
Microsoft Entra ID / Azure AD
SSO & MFA
SAML 2.0, OAuth 2.0 & OIDC
Entra ID Enterprise Applications
App Registrations & Service Principals
Conditional Access
Active Directory / Hybrid Identity
Claims, Tokens, Attributes & Federation
Authentication/Sign-in Logs
PowerShell / IAM Automation
RBAC, Least Privilege & Zero Trust
ITIL / ServiceNow
Good to Have:
Third-party Identity Providers
SaaS application integrations
SCIM provisioning
PKI, certificates and TLS
Application authentication dependencies
Work Requirement:
Willingness to support 24x5 operations/on-call rotation, including night shifts.

Work arrangement
Hybrid