Senior IAM SME Engineer

We are seeking a highly skilled Senior Identity and Access Management (IAM) Engineer with 8-10 years of hands-on experience. The candidate must possess strong expertise in SSO, OIDC, MFA, AuthID, and custom IAM solution development, with preferred experience in OneLogin and Microsoft Entra ID.

Responsibilities:

• Design and develop custom SSO/identity broker solutions, including nonstandard authentication flows and legacy app integrations.
• Design, implement, and maintain SSO integrations using OneLogin and Entra ID.
• Deep, protocol-level understanding of OIDC, OAuth2 and SAML, including token claims design, signing/encryption, and custom authorisation servers/
• Design and implementation of custom MFA and risk-based authentication flows.
• Create custom IAM workflows, automation scripts, and API integrations using Python, PowerShell, or Shell scripting.
• Strong understanding of IAM security threats including token replay, session fixation, consent abuse, and misconfigured federation.
• Ability to perform authentication and authorisation threat modelling/
• Collaborate with engineering, application, and security teams as the IAM subject matter expert (SME).

Requirements:

• 8-10 years of IAM engineering experience.
• Strong hands-on experience with SSO, OIDC, OAuth2 SAML, AuthID, and MFA.
• Solid infrastructure and development background, including TLS / certificate lifecycle management, DNS, reverse proxies, and load balancers
• Preferred SSO product experience: OneLogin and Okta or Microsoft Entra ID.
• Strong scripting experience (Python, PowerShell, Bash).
• Experience with custom IAM solution development (APIs, SDKs, identity workflows).
• Familiarity with SCIM, JWT, conditional access policies, and identity lifecycle management.
• Experience with FIDO2 / WebAuthn, certificate-based authentication, or device trust models.

Soft Skills:

• Excellent oral and written communication skills.
• Ability to work cross-functionally and explain complex issues in simple terms.
• Strong analytical and problem-solving skills.
• Strong documentation and presentation abilities.

Preferred Qualifications:

• Experience with OneLogin mappings, policies, and API-based integrations.
• Deep understanding of Entra ID Conditional Access, Enterprise Apps, and Hybrid Identity.
• Relevant certifications such as SC-300 OneLogin Professional, CISSP.