Principal IAM Engineer

Overview

Principal IAM Engineer role supporting and maintaining Privileged Access Management (PAM) and Identity and Access Management (IAM) solutions, with leadership and mentorship responsibilities.

What you'll do

• Maintain and support PAM and IAM solutions, partnering with IAM Engineers/Architects on requirements analysis, application integration, testing/validation plans, and establishment of security controls.
• Lead support, deployment, and integration activities for PAM capabilities, including privileged account onboarding, identity ownership, access workflows, session management, credential management, and alignment with enterprise security standards.
• Troubleshoot complex PAM and IAM issues by analyzing symptoms, performing root cause analysis (RCA), and implementing validated corrective actions that prevent recurrence and support long-term operational stability.
• Collaborate with the larger IAM team to investigate and resolve issues related to provisioning, deprovisioning, authentication, and access governance across IAM platforms including Entra ID, Saviynt IGA, and other related IAM processes and architecture.
• Supervise the deployment and configuration of PAM/IAM changes and enhancements, guaranteeing adherence to organizational policies and regulatory compliance.
• Create and maintain comprehensive documentation for solution designs, configurations, operational processes, and best practices.
• Provide guidance and mentorship to junior engineers and foster the advancement of technical skills across the team.
• Promote a culture of continuous improvement and knowledge sharing.

What you'll need

• Bachelor's degree in computer science, engineering, or a related field.
• Demonstrated experience deploying Privileged Access Management (PAM) solutions in an enterprise environment, including privileged account lifecycle processes, access controls, approvals/workflows, credential management, and operational support.
• At least 5+ years experience with support, maintenance, configuration, and development of enterprise IAM solutions, including Saviynt IGA, Entra ID/Azure AD, Entra ID Identity Governance, LDAP Directories, and Active Directory administration.
• Solid understanding of IAM principles, account provisioning / lifecycle management, privileged access, authentication, authorization, access reviews, and security policies.
• Demonstrated experience with Entra ID sign-on and multi-factor authentication policies.
• Foundational knowledge of network and security principles including firewall, WAF, VPN, SSL.
• Self-directed and able to manage individual projects or work as part of a larger team.
• Excellent written and verbal communications; solid written and oral presentation skills.

Nice to have

• Experience with ServiceNow integration, Workday integration, and Microsoft Graph (preferred).
• Experience with SQL, XML, JSON, and SOAP/REST APIs (preferred).
• Okta/Auth0 and/or Microsoft Purview experience (a plus).
• Experience with clinical applications, GxP platforms, or the CRO/Biopharma industry (a plus).

Details

• Location: Hyderabad, India.
• Work mode: Hybrid.
• Tasks, duties, and responsibilities are not exhaustive and may be supplemented at the Company's discretion.