Security Engineer - IAM

NETRADYNE
Posted on
NETRADYNE logo
Experience
3 - 6 yrs
Job Location
Bengaluru, India
Vacancy
1
Designation
Identity and Access Management Engineer
Job Type
Not specified

Job Description

Job Role : Security Engineer IAM
Experience : 3- 6 years
Role Overview
We are seeking an experienced Security Engineer with a strong focus on Identity and Access Management (IAM) along with Cloud Security. This role offers the opportunity to design, implement, and manage enterprise-level IAM solutions across Microsoft and AWS environments. You will work with cutting-edge IAM technologies including Microsoft Entra ID (formerly Azure AD), AWS IAM, and Privileged Access Management (PAM) solutions. We welcome applicants with 3-5 years of IAM experience, and we are open to considering senior-level candidates with broader security expertise.
Key Responsibilities
  • Design, implement, and maintain identity governance frameworks using Microsoft Entra ID, including user provisioning, authentication policies, and conditional access strategies
  • Strong understanding of cloud security concepts including cloud architecture security, shared responsibility models, and cloud-native security best practices
  • Manage AWS IAM policies, roles, and user provisioning across multiple AWS accounts, ensuring least privilege access principles
  • Implement and maintain Privileged Access Management (PAM) solutions to monitor, control, and audit privileged user activities
  • Configure and manage multi-factor authentication (MFA), single sign-on (SSO), and federation mechanisms across hybrid environments
  • Conduct security audits and access reviews to ensure compliance with regulatory standards and internal security policies
  • Integrate IAM solutions with enterprise applications and SaaS platforms
  • Develop and maintain IAM documentation, runbooks, and disaster recovery procedures
  • Manage identity and access controls for AI agents, including Copilot Studio agents and automated workflows
  • Implement security frameworks for Model Context Protocol (MCP) integrations and agent-to-service authentication
  • Design and implement granular access controls for AI agents, including scope limitations, token management, and service principal governance
  • Design and maintain Role-Based Access Control (RBAC) models across enterprise applications, ensuring appropriate permission hierarchies and least privilege principles
  • Build and automate access provisioning and deprovisioning workflows using identity governance tools, reducing manual errors and improving compliance
  • Implement lifecycle management and access certification processes for both human and non-human identities
  • Respond to security incidents related to identity compromise and unauthorized access
Required Qualifications
  • 3-5 years of hands-on experience with IAM technologies and solutions
  • Demonstrated expertise in Microsoft Entra ID, including administration and configuration
  • Solid understanding of AWS IAM including identity federation, cross-account access, and policy management
  • Experience with at least one PAM solution (Delinea Secret Server, BeyondTrust, CyberArk, or similar)
  • Strong understanding of authentication and authorization protocols (OAuth, SAML, LDAP, Kerberos)
  • Knowledge of compliance frameworks (Zero Trust, NIST, SOC 2, ISO 27001)
  • Excellent communication and documentation skills
Preferred Qualifications
  • 3+ years of IAM experience or senior-level security background
  • Microsoft Certified: Identity and Access Administrator Associate (SC-300) or similar certification
  • Experience designing and securing AI agent architectures and autonomous workflows
  • Hands-on experience with Copilot Studio and Copilot agents security configurations
  • Knowledge of Model Context Protocol (MCP) and agent-to-service authentication patterns
  • Experience designing and implementing RBAC models across complex application ecosystems
  • Expertise in automating access provisioning and deprovisioning workflows using platforms like Okta, ServiceNow, or Microsoft Identity Manager
  • Experience implementing access controls specifically for AI agents, service principals, and automated workflows
  • Knowledge of identity governance and lifecycle management (ILM) solutions
  • Experience with multiple cloud providers (Azure, AWS, GCP)
  • Experience implementing Zero Trust security architecture
  • Familiarity with scripting languages (PowerShell, Python, Bash) for automation
  • Experience with identity-first security incident response
Key Technical Skills
  • Microsoft Entra ID (Azure AD), Active Directory, Microsoft 365, Azure, Graph API
  • AWS IAM, AWS SSO, Cognito, AWS Organizations, STS, CloudTrail
  • PAM Solutions: CyberArk, BeyondTrust, Delinea Secret Server, HashiCorp Vault
  • Protocols: OAuth 2.0, SAML, LDAP, Kerberos, OpenID Connect
  • Scripting: PowerShell, Python, Bash, REST APIs
  • AI & Agents: Copilot Studio, AI Agents, Model Context Protocol (MCP), Agent authentication, Agentic workflows
  • RBAC & Governance: Role design, Application RBAC, Access certification, Identity lifecycle management, Segregation of duties
  • Provisioning & Automation: Okta, ServiceNow, Microsoft Identity Manager, Automated workflows, Deprovisioning automation, System integration
Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

No Referrers Available

There are currently no referrers available for this job. You can still apply, will let you know once there is any referrer available.