The posting
About the Role
We are seeking a motivated Identity and Access Management (IDAM) Engineer with approximately 4+ years of hands-on experience in supporting and implementing IAM/IGA (Identity Governance and Administration) solutions. This role is critical for maintaining secure and compliant access to enterprise systems, ensuring smooth identity lifecycle operations, and enabling automation across IAM processes.
Key Responsibilities
- Provide daily operational support for IAM/IGA systems including: User onboarding/offboarding Role and entitlement management Access certification and review processes Customize or develop IAM workflows, connectors, and policies using Java and Groovy Design, develop, and maintain custom connectors for target application integrations Maintain and query identity data in MongoDB/SQL databases for troubleshooting and analytics Integrate with systems such as Active Directory, LDAP, Azure AD, and RESTful/SOAP APIs for identity provisioning and access control Configure and manage Single Sign-On (SSO) and Multi-Factor Authentication (MFA) integrations Work with SAML, OAuth 2.0, and OpenID Connect (OIDC) protocols for authentication and federation Design and implement Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC) models Configure and manage access certification campaigns and periodic access reviews Collaborate with internal teams and stakeholders to troubleshoot access issues, perform root cause analysis, and resolve user account problems Perform application onboarding, including birthright access rules and entitlement mapping Ensure IAM policies and operations align with organizational security standards and compliance requirements (SOX, GDPR, ISO 27001, etc.) Document technical configurations, changes, architecture diagrams, and standard operating procedure Assist in incident response, root cause analysis, and continuous improvement efforts for IAM services Mentor junior team members and support knowledge transfer within the team
Required Skills & Qualifications
- 4+ years of experience in IAM/IGA support or implementation roles Hands-on experience with Cymmetri IDAM tool preferred Proficient in Java for scripting, customization, and connector development within IAM platforms Strong hands-on experience with Groovy scripting API development and API testing experience (Postman, SoapUI, or similar tools) Working knowledge of MongoDB/SQL – ability to write queries and investigate data issues Experience working with Active Directory and Azure AD for user creation, properties, group management, and authentication Familiarity with REST/SOAP APIs for system integration and automation Practical knowledge of SAML, OAuth 2.0, and OIDC protocols Experience configuring SSO and MFA solutions Understanding of RBAC/ABAC access models Hands-on experience with Joiner-Mover-Leaver (JML) process Experience in user provisioning and de-provisioning across multiple target systems Experience with access certification/access review campaign configuration Experience creating user manuals and technical documentation for end users Experience with UAT and production integration/deployment of applications Basic understanding of LDAP directory structures and schema Familiarity with version control tools (Git) and basic CI/CD concepts is a plus Strong problem-solving skills with a security-first mindset Clear and effective communication and documentation skills Experience with incident and change management processes (ITIL-aligned) Bachelor’s degree in computer science, Information Technology, or related field (preferred)
Nice to Have
- Experience with Cymmetri IDAM tool Exposure to IAM tools like SailPoint, Saviynt, ForgeRock, or Okta Familiarity with ITIL practices Exposure to cloud platforms (Azure/AWS) for IAM deployments Basic scripting knowledge in Python or Shell Understanding of PAM (Privileged Access Management) concepts Basic understanding of IGA concepts – like Access Review, Provisioning, Deprovisioning etc



