Senior IAM (Identity & Access Management) Engineer with OneLogin experience - Hybrid (8-15 Yrs) - Bengaluru

Luxoft India · India

Dear Applicants,

Pl note we are looking for Senior IAM (Identity & Access Management) with OneLogin experience for Bangalore location

Experience - 8-15 yrs

Location : Bangalore

Work Mode : Hybrid (3 days in a week in office)

Skills Required- IAM (Identity and Access management ) + OneLogin and Entraid experience

Notice period- Immediate to 30 days only

Project Description

We are seeking a highly skilled Senior Identity & Access Management (IAM) Engineer with 8–10 years hands-on experience. The candidate must possess strong expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID.

Responsibilities

• Design and develop custom SSO/identity broker solutions, including non‑standard authentication flows and legacy app integrations

• Design, implement, and maintain SSO integrations using OneLogin and Entra ID.

• Deep, protocol‑level understanding of OIDC, OAuth2, and SAML, including token claims design, signing/encryption, and custom authorization servers

• Design and implementation of custom MFA and risk‑based authentication flows.

• Experience with FIDO2 / WebAuthn, certificate‑based authentication, or device trust models

• Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.

• Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.

• Ability to perform authentication and authorization threat modeling

• Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).

Mandatory Skills

• 8–10 years of IAM ((Identity & Access Management) engineering experience.

• Strong hands-on experience with SSO, OIDC, OAuth2, SAML, AuthID, and MFA.

• Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers

• Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID.

• Strong scripting experience (Python, PowerShell, Bash).

• Experience with custom IAM solution development (APIs, SDKs, identity workflows).

• Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.

• Excellent oral and written communication skills.

• Ability to work cross-functionally and explain complex issues in simple terms.

Experience- 8-15 yrs

Notice period - Immediate to 30 days

Work location - Bengaluru

Work Mode- Hybrid (3 days per week in office)