Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 10 hours ago

Senior IAM Engineer

Jobgether3,797 open roles

Where
India
Work mode
Remote
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior IAM EngineerJobgether · India

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Jobgether's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

7.9% of postings close within 7 days. Measured by our own scanner across the market. Jobgether postings stay open a median of 5 days.

Share of postings closed within
  1. 1.6%1 day
  2. 3.6%3 days
  3. 7.9%7 days
  4. 14.9%14 days
  5. 34.2%30 days
This job: posted 10 hours ago

Jobgether median: 5 days open

The posting

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Senior IAM Engineer based in India.

This is a senior-level opportunity to shape and evolve an enterprise Identity and Access Management ecosystem across hybrid and multi-cloud environments. You’ll serve as a technical authority for identity architecture, security, governance, and access automation. The role combines hands-on engineering with strategic architecture across Okta, Active Directory, Entra ID, Google Workspace, and SaaS applications. You’ll lead initiatives focused on Zero Trust, identity governance, lifecycle automation, and secure access at scale. You’ll also influence IAM standards, mentor engineers, and collaborate closely with security, infrastructure, cloud, and application teams. The position offers the opportunity to lead complex projects from architecture and design through implementation and continuous optimization. This is a fully remote, long-term contract role for an experienced IAM professional who enjoys solving complex identity challenges and driving security transformation.

Accountabilities:

  • Architect and evolve enterprise IAM strategies across Okta, Active Directory, Entra ID, Google Workspace, SaaS applications, and hybrid or multi-cloud environments.
  • Design scalable, secure, and resilient identity solutions while defining IAM standards, reference architectures, patterns, policies, and procedures.
  • Serve as the senior technical owner of the Okta platform, including Universal Directory, SSO, MFA, Adaptive Authentication, API Access Management, Lifecycle Management, Workflows, and Identity Governance.
  • Design and implement complex application integrations using SAML 2.0, OIDC/OAuth 2.0, SCIM, WS-Federation, and other appropriate identity protocols.
  • Build and automate joiner, mover, and leaver processes and user provisioning/deprovisioning across cloud and on-premises applications.
  • Establish effective identity governance practices covering access requests, access certifications, reviews, segregation of duties, privileged access, RBAC, and ABAC.
  • Lead Zero Trust initiatives focused on least privilege, continuous verification, context-aware access, passwordless authentication, device trust, and adaptive MFA.
  • Develop and implement PAM strategies covering privileged and service accounts across cloud and on-premises environments.
  • Automate IAM configuration and deployment using Okta APIs, Terraform, infrastructure-as-code practices, and CI/CD pipelines.
  • Develop Okta Workflows and custom integrations to automate identity and access processes and improve operational efficiency.
  • Integrate IAM capabilities with security and operational platforms such as CSPM, SIEM/SOAR, and ITSM solutions.
  • Establish continuous compliance monitoring, automate access reporting and evidence collection, and support regular access certification campaigns.
  • Ensure IAM controls align with relevant compliance and security frameworks, including SOC 2, ISO 27001, NIST CSF, HIPAA, and PCI-DSS.
  • Support internal and external audits by providing documentation, evidence, and technical walkthroughs.
  • Monitor identity-related threats and anomalies in partnership with security operations teams and conduct regular IAM security assessments.
  • Mentor junior IAM engineers through technical guidance, code reviews, knowledge sharing, and best-practice development.
  • Lead cross-functional IAM initiatives from planning and architecture through implementation, stakeholder communication, risk management, and delivery.
  • Communicate IAM strategies, risks, recommendations, and technical concepts effectively to both technical and non-technical stakeholders.
  • Stay current with emerging IAM technologies, security threats, identity standards, and platform capabilities, identifying opportunities for continuous improvement.
  • 6+ years of hands-on experience in Identity and Access Management, including at least 3+ years administering and engineering Okta in a production enterprise environment.
  • Deep practical knowledge of identity and authentication protocols, including SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, WS-Federation, LDAP, and Kerberos.
  • Demonstrated experience designing and implementing real-world Okta application integrations using SAML, OIDC/OAuth, and SCIM, with the ability to select the appropriate protocol based on application capabilities and business requirements.
  • Strong experience integrating Okta with Active Directory, Entra ID, Google Workspace, and cloud directories within hybrid environments.
  • Strong understanding of IAM architecture, identity lifecycle management, access governance, authentication, authorization, and Zero Trust principles.
  • Hands-on experience with Okta Universal Directory, SSO, MFA, Adaptive Authentication, Lifecycle Management, Workflows, and Identity Governance.
  • Experience with RBAC and ABAC models, privileged access management, access reviews, certifications, and segregation-of-duties controls.
  • Practical knowledge of cloud and enterprise security environments, with an understanding of identity-related risks and security operations.
  • Experience using Okta APIs, Terraform, infrastructure-as-code, automation, and CI/CD practices to manage IAM configurations and deployments.
  • Ability to design scalable integrations and automate identity processes across SaaS, cloud, and on-premises environments.
  • Familiarity with security and compliance frameworks such as SOC 2, ISO 27001, NIST CSF, HIPAA, and PCI-DSS.
  • Strong analytical and problem-solving skills, with the ability to troubleshoot complex identity issues and make sound architectural decisions.
  • Excellent communication and stakeholder-management skills, with the ability to explain technical IAM concepts to both engineering teams and business leaders.
  • Demonstrated leadership skills and the ability to mentor engineers, lead technical initiatives, and manage cross-functional projects.
  • Comfortable working independently in a fully remote environment and taking ownership of complex, high-impact IAM initiatives.
  • Full-time contract position with a long-term engagement and potential opportunity for conversion to a permanent role.
  • 100% remote work, with the flexibility to work from anywhere in India.
  • Standard full-time schedule of 40 hours per week, Monday through Friday.
  • Opportunity to work on enterprise-scale IAM architecture and security initiatives.
  • Exposure to hybrid and multi-cloud identity environments spanning Okta, Active Directory, Entra ID, Google Workspace, and SaaS applications.
  • Opportunity to influence Zero Trust maturity, identity governance, access automation, and enterprise security strategy.
  • Senior-level technical ownership and the opportunity to lead complex IAM projects from concept through delivery.
  • Opportunities to mentor engineers and collaborate with security, cloud, infrastructure, and application teams.
  • Long-term opportunity within a technically challenging and security-focused environment.

How Jobgether works:

We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.

We appreciate your interest and wish you the best!

Why Apply Through Jobgether?

Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.

#LI-CL1

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Jobgether's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Jobgether's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Jobgether's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.