Partner IAM - Security Platform Engineer

Accountabilities: Identity platform engineering: Design, develop, deploy, and support scalable IAM solutions using Microsoft Entra ID and Microsoft Entra External ID, with particular emphasis on external and B2B partner identities. Application and API development: Build, test, and maintain secure applications, RESTful APIs, microservices, and web interfaces using Java, Spring Boot, and modern web technologies. Microsoft identity integrations: Develop and maintain integrations with Microsoft Graph API and related identity services to support authentication, identity lifecycle management, and secure access to enterprise resources. Cloud identity modernization: Contribute to the migration of B2B identities from on-premises identity solutions to cloud-based platforms, improving security, user experience, single sign-on, and onboarding and offboarding automation. Security architecture and design: Collaborate with technical leads, architects, security specialists, and application owners to deliver IAM capabilities aligned with enterprise architecture, security standards, and risk management requirements. Platform strategy and roadmaps: Help shape IAM platform architecture, technical standards, strategic initiatives, and product roadmaps while identifying opportunities to improve security and operational efficiency. Monitoring and diagnostics: Develop and maintain monitoring systems, alerting mechanisms, operational dashboards, and diagnostic tools, using technologies such as Kusto Query Language (KQL) to analyze performance and troubleshoot issues. Production support and incident management: Handle service requests, incidents, and problems, conduct root-cause analysis, and implement corrective measures to maintain platform reliability and availability. CI/CD and development automation: Build and maintain continuous integration and continuous delivery pipelines to automate software builds, testing, security validation, and deployments. Software quality and testing: Develop automated unit, integration, and end-to-end tests to ensure applications and services remain secure, reliable, maintainable, and fit for purpose. Technical documentation: Create and maintain architecture diagrams, API documentation, coding standards, configuration guides, operational procedures, and application onboarding documentation. Agile engineering and AI-assisted development: Apply Agile methodologies and use AI-assisted development tools, such as GitHub Copilot or equivalent solutions, to improve development, testing, documentation, and delivery while maintaining appropriate security and quality controls. Cross-functional collaboration: Work effectively with globally distributed teams, communicate technical decisions clearly, and take ownership of deliverables throughout the engineering lifecycle, from requirements and design to production support. On-call support: Participate in a rotational on-call schedule to help maintain service continuity and respond to operational issues when required. Requirements Education: Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline, or equivalent practical experience. Professional experience: At least five years of relevant experience in software engineering, identity and access management, or IT, ideally within a large enterprise environment. Microsoft identity expertise: Hands-on experience designing, implementing, or supporting identity solutions using Microsoft Entra ID, including experience with external or B2B identities. Entra External ID: Deep practical experience with Microsoft Entra External ID for partner, customer, or other external identity scenarios is highly desirable. Backend development: Strong experience developing secure RESTful APIs and microservices using Java and Spring Boot. API integration: Experience integrating applications with Microsoft Graph API and related identity services. Frontend development: Experience developing web applications using Angular or another modern JavaScript or TypeScript framework. Database knowledge: Strong understanding of relational and/or NoSQL databases, including their use in enterprise application development. Automated testing: Experience implementing and maintaining automated unit, integration, and end-to-end tests for APIs, batch services, and web applications. CI/CD and DevSecOps: Practical experience implementing automated build, testing, security validation, and deployment processes using CI/CD pipelines. Familiarity with tools such as 42Crunch, SonarQube, or Checkmarx is required. Development tools: Experience working with GitHub, Jira, Postman, and related software engineering tools. Scripting and automation: Experience using PowerShell or comparable scripting technologies to automate operational and engineering tasks. Cloud platform knowledge: Experience with Microsoft Azure services is preferred. Familiarity with Google Cloud Platform, particularly Cloud Run, container-based services, Cloud Logging, and Cloud Monitoring, is an advantage. Azure DevOps: Experience managing CI/CD pipelines and deployments using Azure DevOps is desirable. Monitoring and diagnostics: Familiarity with Kusto Query Language (KQL) and its use in monitoring, troubleshooting, and operational analysis is preferred. AI-assisted engineering: Experience using GitHub Copilot or similar AI-assisted development tools to support coding, testing, documentation, and software delivery is an advantage. Enterprise IAM experience: Ability to design, deploy, troubleshoot, and support identity management capabilities in complex enterprise environments. Security mindset: Strong understanding of application security, secure API development, identity integrations, and the importance of maintaining security and quality throughout the development lifecycle. Problem-solving skills: Strong analytical abilities and a structured approach to diagnosing complex application and identity integration issues. Communication and collaboration: Ability to explain technical concepts clearly to engineering teams, application owners, business partners, and leadership. Adaptability and ownership: Comfortable managing competing priorities, working through ambiguity, meeting deadlines, and taking responsibility for end-to-end delivery. Operational flexibility: Willingness and ability to participate in rotational on-call support as required. Teamwork: Ability to collaborate effectively with globally distributed, cross-functional teams across engineering, security, architecture, and business functions. Benefits Remote work: Fully remote working arrangement within India. Full-time employment: Full-time opportunity focused on enterprise technology and identity platform engineering. Modern technology stack: Hands-on exposure to Microsoft Entra ID, Microsoft Entra External ID, Java, Spring Boot, REST APIs, and enterprise identity integrations. Cloud and platform modernization: Opportunities to contribute to large-scale migration initiatives and the evolution of cloud-based identity services. Security-focused engineering: Work on solutions that improve enterprise security, identity governance, access management, and risk mitigation. Advanced engineering practices: Exposure to CI/CD automation, DevSecOps tooling, automated testing, cloud monitoring, and AI-assisted software development. International collaboration: Work with globally distributed engineering, architecture, security, and application teams. Professional development: Opportunities to deepen expertise in IAM architecture, cloud platforms, enterprise integrations, and modern software engineering practices. Salary and additional benefits: Salary range, healthcare coverage, paid leave, bonuses, and other employee benefits have not been specified in the available job description and should be confirmed with the hiring company.