Lead Engineer - IAM Lifecycle Management

Overview

Lead the Azure DevOps pipeline engineering and release automation for secure IAM solutions, and engineer identity and account lifecycle capabilities across on-premises, cloud and SaaS systems, in partnership with product, security, HR, architecture, operations and audit stakeholders.

What you'll do

• Implement and enhance Azure DevOps pipeline engineering for IAM solutions, including reusable YAML templates, build and release automation, artifact management, automated testing, code-quality and security gates, secrets handling, environment promotion, deployment approvals, release evidence, end-to-end traceability and tested rollback controls.
• Deliver assigned lifecycle engineering work to agreed scope, quality, security and timelines, identifying delivery risks and dependencies early.
• Collaborate with product owners, architects and engineering stakeholders to translate business, security, regulatory and architectural requirements into scalable, secure and maintainable technical solutions.
• Engineer end-to-end identity and account lifecycle capabilities, including creation, provisioning, modification, suspension, recertification and deprovisioning across on-premises, cloud and SaaS systems.
• Implement and enhance joiner, mover, leaver, rehire, contractor and non-human identity workflows, including trigger events, approval paths, account states, exception handling and recovery controls.
• Integrate authoritative HR and identity sources with directories, governance platforms and target applications using connectors, APIs and event-driven services, while improving source-data quality and reconciliation.
• Create functional and technical test scenarios, maintain requirements traceability and implementation evidence, and support remediation of defects, audit findings and control gaps.
• Develop, enhance and support secure IAM applications using Next.js microfrontends, Express.js and NestJS services, GraphQL APIs and .NET components, applying reusable architecture patterns across the full solution stack.
• Design and deliver accessible, responsive Next.js user interfaces and secure Express.js, NestJS or ASP.NET APIs for IAM lifecycle applications, with reusable components, API versioning, validation, authentication, authorisation, error handling, observability and performance optimisation.
• Support colleagues through technical guidance, peer review, troubleshooting, reusable documentation and knowledge sharing.

What you'll need

• Bachelor's degree in Computer Science, Information Technology or a related discipline, or equivalent practical experience.
• Strong hands-on experience designing and operating Azure DevOps CI/CD pipelines, including reusable YAML templates, pipeline-as-code practices, artifact and package management, automated unit and integration tests, code-quality and security gates, secrets handling, deployment approvals, environment promotion, release traceability and rollback controls.
• Demonstrated hands-on experience in identity and access management, including implementation and support of identity and account lifecycle capabilities.
• Strong understanding of joiner, mover, leaver, rehire, employee, contractor and non-human identity lifecycle patterns and their associated governance controls.
• Experience designing and configuring provisioning and deprovisioning workflows, approval processes, birthright and role-based access, account-state transitions and exception handling.
• Experience integrating IAM platforms with HR systems, Active Directory, Microsoft Entra ID, LDAP, databases, SaaS applications and custom applications.
• Knowledge of identity data models, account correlation, reconciliation, access reviews, certification, policy enforcement, orphan-account prevention and auditability.
• Strong hands-on development experience with Next.js, Express.js and NestJS, including microfrontend architecture, TypeScript, reusable user-interface components, secure backend services, authentication and authorisation integration, automated testing and performance optimisation.
• Experience delivering end-to-end UI and API solutions across Next.js microfrontends and Express.js, NestJS, GraphQL or .NET services, including responsive design, secure API development, input validation, automated testing, documentation and production troubleshooting.
• Hands-on engineering experience with .NET and ASP.NET Web APIs, including secure service design, authentication and authorisation, integration with IAM platforms, automated testing, performance optimisation and production support.
• Understanding of least privilege, segregation of duties, account ownership, privileged-access dependencies and application-security practices.
• Demonstrated ability to deliver work independently to a high standard, with strong analytical, problem-solving, documentation and stakeholder-communication skills.

Nice to have

• Advanced experience architecting enterprise-scale Azure DevOps delivery platforms for Next.js, Express.js, NestJS, GraphQL and .NET solutions, including governed reusable YAML templates, artifact lifecycle management, multi-stage CI/CD, automated quality and security controls, deployment approvals, release traceability, resilience and rollback strategies.
• Advanced hands-on experience with SailPoint, Saviynt or a comparable IGA platform, including workflow, connector and policy configuration.
• Experience modernising or migrating identity lifecycle processes from legacy or bespoke solutions to a SaaS IGA platform.
• Integration experience with LDAP, Active Directory, Microsoft Entra ID and custom applications using REST, SOAP, Microsoft Graph, GraphQL, TypeScript, .NET or equivalent technologies.
• Experience applying microfrontend design patterns, modular Next.js architecture, API-first development across Express.js, NestJS, GraphQL and .NET, automated testing, secure coding and Azure DevOps-based delivery in enterprise applications.
• Experience designing serverless integration services or event-driven components in Microsoft Azure.
• Experience with audit and control frameworks, including SOX and GxP, and producing evidence suitable for regulated environments.
• Experience implementing AI-enabled identity lifecycle management processes.
• Knowledge of AI identity governance, including identity and access controls for AI agents and non-human identities.
• Relevant certification such as CISSP, SailPoint, Saviynt, CIMP, Microsoft Azure or another IAM, cloud or security certification.
• Experience in pharmaceutical, life sciences, financial services or another highly regulated industry.

Details

• Location: Bengaluru Luxor North Tower.