Senior Identity & Access Management Technical Lead

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.

Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Job Description

A senior engineer is needed in the identity and access management team to help with the design, configurations/development and engineering tasks. Activities of provision/de-provision user identities, authentication and authorization of access and life-cycle management.

The Azure IAM Engineer will be responsible for planning, designing, implementing, and operating Identity and Access Management (IAM) solutions across Azure (Entra ID), AWS, and on-premises environments in alignment with enterprise security policies, standards, and regulatory requirements. The role requires strong technical expertise to ensure secure identity lifecycle management, access governance, authentication, authorization, and integration across enterprise applications and platforms. Design, implement, and manage Azure Entra ID (Azure AD) services including Identity Lifecycle, Access Reviews, Conditional Access, MFA, and Privileged Identity Management (PIM). Develop and maintain IAM integrations using modern protocols such as SAML, OAuth2, OIDC, SCIM , and REST APIs. Build and enhance IAM solutions across hybrid environments involving cloud (Azure/AWS) and on-prem systems (AD, LDAP, legacy IAM tools) . Support application onboarding and federation with Entra ID, including SSO and authentication flows. Ensure identity governance and compliance controls , including access certification, audit readiness, and regulatory compliance (SOX, Fed requirements). Automate IAM processes leveraging PowerShell, Terraform, Azure CLI, and scripting frameworks . Monitor IAM systems using enterprise observability tools and ensure proactive incident detection and resolution. Participate in incident, problem, and change management (INC/RITM/PRB/CHG) aligned with operational processes. Contribute to architectural design discussions, including Zero Trust, identity security posture, and modernization initiatives . Collaborate with application teams, cloud teams, and security teams to ensure secure IAM integration. Support continuous improvement through automation, optimization, and adoption of emerging IAM technologies . Prepare and manage releases, deployments, and lifecycle upgrades of IAM components. Investigate and resolve complex IAM issues impacting authentication, authorization, and access. Development & Engineering Responsibilities (if applicable) Design and develop scalable, high-availability IAM components and integrations. Write secure, efficient, and reusable code for identity-related services and APIs. Ensure adherence to secure coding practices and enterprise design standards . Support CI/CD pipelines for IAM deployments using tools like Jenkins, Bitbucket, and Azure DevOps. Required Qualifications Bachelor’s degree in Computer Science, Engineering, IT, or equivalent. 10-16 years of experience in Identity & Access Management (IAM) with focus on Azure/Entra ID. Strong hands-on experience in: Azure Entra ID (Azure AD) MFA, Conditional Access, PIM Identity Lifecycle Management and Access Governance Knowledge of authentication and authorization standards ( SAML, OAuth, OIDC, LDAP, Kerberos ). Experience in hybrid IAM environments (Cloud + On-Prem AD). Preferred Qualifications Experience with IAM tools such as: Broadcom CA SiteMinder / Identity Manager (good to have) Saviynt / SailPoint / other IGA tools Experience in automation and scripting (PowerShell, Python, Terraform). Exposure to CI/CD tools (Jenkins, Bitbucket, Azure DevOps, Ansible). Hands-on experience with Azure, AWS, Kubernetes, Docker . Understanding of Zero Trust architecture and identity security frameworks . Experience with monitoring/logging platforms such as Dynatrace, Sumo Logic, or Azure Monitor. Strong understanding of IAM operations (incident, change, problem management) . Experience working in regulated environments with compliance requirements. Additional Expectations Strong analytical and troubleshooting skills with focus on operational stability. Ability to manage multiple priorities in a fast-paced environment. Excellent collaboration and communication skills across global teams. Ownership mindset with ability to drive automation and continuous improvement initiatives .

In-Office Collaboration We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.  

Full-Time/Part-Time

Full time Timings

(8:00p-4:30a) India Business Unit

AWMPO AWMP&S President's Office Job Family Group

Technology Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.

We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.