Security Architect

Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : Identity Access Management (IAM)
Good to have skills : NA
Minimum 3 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary:
We are seeking a skilled and motivated Identity and Access Management (IAM) Engineer with hands-on experience in Microsoft Entra ID (Azure AD), SAML SSO, and MFA. The ideal candidate will also have exposure to Okta, Active Directory, and advanced Azure identity configurations such as App Registrations, Enterprise Applications, and Conditional Access Policies. This role requires a strong technical foundation, scripting capability.L3 exposure and good communication is must.

Roles & Responsibilities:
- Configure, maintain, and troubleshoot SAML 2.0-based SSO integrations with both cloud and on premise applications.
- Support Microsoft Entra ID (Azure AD), Entra Connect, identity infrastructure including App Registrations, Enterprise Applications, and Conditional Access Policies.
- Manage and support MFA policies and configurations, ensuring secure access for global users. Experience with OAUTH,OIDC and SAML protocols.
- Develop automation scripts using PowerShell to streamline routine identity management tasks.
- Collaborate with stakeholders to onboard new applications and ensure alignment with identity governance best practices.
- Monitor and resolve issues related to SSO failures, MFA challenges, and user access concerns.
- Provide support during incidents and escalations, including participation in 24x7 rotational shifts.
- Document processes, integrations, and architecture clearly for ongoing operational use and audit readiness.
- Assist with identity lifecycle management and security policy enforcement.
- Exposure to Okta and Active Directory is a strong plus, especially in hybrid identity scenarios.

Professional & Technical Skills:
-Minimum 4 to 5 years of hands on experience with Microsoft Entra ID (Azure AD), Entra Connect, SAML SSO, and MFA. Must have exposure to L3 activities and support role.
-Experience in configuring and managing:
-Azure App Registrations
-Enterprise Applications
-Conditional Access Policies
-Basic PowerShell scripting for automation and task orchestration.
-Working knowledge of Active Directory, LDAP, and cloud/hybrid identity models.
-Exposure to Okta or other identity providers (IDPs) is a strong plus.
-Understanding of IAM principles such as authentication, federation, authorization, RBAC, and identity lifecycle.
-Strong problem-solving and analytical skills.
-Excellent communication and documentation capabilities. Client interaction and presentation skills for explaining technical topics in simplest way.
-Ability and willingness to work in 24x7 rotational shifts to support global operations.
-Mandatory to have Microsoft Certified: Identity and Access Administrator Associate (SC-300)
-Preferred Certifications
-Okta Certified Professional (Optional)
-CompTIA Security plus or equivalent (Optional)
-ITIL Foundation (Optional)
-AZ-900 or AZ-305 or Azure cloud certifications

Additional Information:
- The candidate should have minimum 4 years of experience in Identity Access Management (IAM).
- This position is based at our Bengaluru office.
- A 15 years full time education is required.