IAM Engineer

About Our Company Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection. Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP. Job Description Azure IAM Engineer will be responsible for engineering, administration, automation, and operational support of enterprise Identity & Access Management platforms with a primary focus on Microsoft Entra ID (Azure AD), Active Directory, Azure MFA, SSO, Federation, and Identity Governance solutions. This role requires a strong DevOps mindset, automation expertise, and participation in a 24x7 rotational support model to ensure platform stability, security, and service availability. Key Responsibilities Design, implement, administer, and support enterprise IAM solutions centered around Microsoft Entra ID (Azure AD), Active Directory, Azure MFA, Conditional Access, and Identity Governance. Integrate applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM provisioning standards. Provide L2/L3 production support for IAM platforms, ensuring high availability and adherence to SLA commitments. Monitor platform health, analyze incidents, perform root cause analysis (RCA), and implement preventive measures. Support onboarding of applications to SSO, MFA, and modern authentication platforms. Develop and maintain automation solutions using PowerShell, Microsoft Graph API, Python, or REST APIs to improve operational efficiency. Manage and support Entra ID lifecycle activities, authentication policies, Conditional Access policies, and access governance processes. Participate in incident, problem, change, and release management activities. Perform system health checks, trend analysis, capacity planning, and platform optimization. Collaborate with infrastructure, security, network, cloud, and application teams to resolve complex IAM issues. Support disaster recovery testing, resiliency exercises, and operational readiness activities. Contribute to CI/CD implementation and infrastructure automation initiatives. Create and maintain technical documentation, operational runbooks, SOPs, and knowledge articles. Participate in a 24x7 rotational shift model, including weekends and off-hours support when required. Drive continuous improvement initiatives and identify opportunities for automation and modernization within IAM services. Work closely with global onsite and offshore teams to deliver secure and scalable identity solutions. Required Qualifications Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline. 2-4 years of experience in Identity & Access Management and Production Support environments. Hands-on experience with: Microsoft Entra ID (Azure AD) Active Directory Azure MFA Conditional Access SSO & Federation Technologies Identity Governance & Lifecycle Management Strong understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM. Experience troubleshooting authentication, authorization, and identity federation issues. Strong scripting and automation experience using PowerShell, Python, or REST APIs. Experience supporting critical enterprise platforms in a 24x7 environment. Excellent analytical, troubleshooting, and problem-solving skills. Strong verbal and written communication skills. Willingness to work in rotational shifts and global support model. Preferred Qualifications Experience with Microsoft Entra ID Governance, Access Reviews, Entitlement Management, and Privileged Identity Management (PIM). Experience with DevOps and CI/CD tools including Azure DevOps, Jenkins, Bitbucket, GitHub, Ansible, Jira, and Confluence. Experience with monitoring and observability tools such as Dynatrace, ScienceLogic, SiteScope, CA APM (Wily), Azure Monitor, and Sumo Logic. Exposure to cloud platforms including Microsoft Azure and AWS. Good understanding of containers and orchestration technologies such as Docker and Kubernetes. Exposure to IIS, Tomcat, and modern application architectures. Experience supporting large-scale enterprise IAM environments and cloud identity transformations. Knowledge of Zero Trust Security principles and modern authentication frameworks. In-Office Collaboration We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process. Full-Time/Part-Time Full time Timings (4:45p-1:15a) India Business Unit AWMPO AWMP&S President's Office Job Family Group Technology Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law. We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.