The Role
Designs, configures, and secures enterprise IAM environments using Okta or SailPoint. Responsibilities include identity lifecycle management, SSO integrations, automated provisioning, MFA policies, RBAC and ABAC governance, directory and SaaS connectivity, regression testing, patch validation, and zero-trust security enforcement. The role requires expertise in SAML, OIDC, OAuth, LDAP, Active Directory, and SCIM, plus an Okta or SailPoint certification.
Summary Generated by Built In
This is a remote position.
IAM (Identity & Access Management) Engineer (Okta / SailPoint)
Job Details
- Employment Type: Contract
- Work Mode: Remote
- Location: Offshore
- Total Experience Required: 4 to 8 years
- Relevant Experience Required: 3+ years of dedicated implementation and configuration experience across enterprise IAM platforms (Okta or SailPoint)
- Mandatory Certification: Okta Certified Professional/Consultant or SailPoint Certified IdentityNow Engineer
Job Summary
We are seeking an experienced IAM Engineer to design, configure, and secure our global identity and access governance footprint. The ideal candidate will orchestrate complex lifecycle management pathways, configure secure single sign-on integrations, build automated user provisioning workflows, and enforce strict zero-trust boundary guidelines across cloud and on-premise application matrices.
Key Responsibilities
- Configure and deploy core IAM framework modules, managing user onboarding pipelines, automated lifecycle states, and access certification governance campaigns.
- Design and maintain Single Sign-On (SSO) configurations, setting up federated cross-app connections, custom SAML 2.0 / OpenID Connect (OIDC) profiles, and OAuth authorization parameters.
- Build automated provisioning workflows, writing system rules, attribute transformations, and direct API connector scripts to manage directory feeds (Active Directory, HR systems).
- Implement adaptive Multi-Factor Authentication (MFA) policies, configuring context-aware security profiles, network geofencing metrics, and sign-on threshold parameters.
- Govern identity security and access access levels, structuring complex role-based access control (RBAC), attribute-based access control (ABAC), and least-privilege security lines.
- Collaborate with enterprise infrastructure teams to support secure connectivity with directory endpoints, internal databases, and downstream SaaS application rings.
- Lead update regression validations and patch cycles, auditing platform custom configurations across sandboxes to prevent authentication processing drops.
Requirements
- 4 to 8 years of core enterprise IT security experience, with 3+ dedicated years actively designing, building, and deploying software within Okta or SailPoint environments.
- Strong technical mastery of web identity languages (SAML, OIDC, OAuth), directory structures (LDAP, Active Directory), and SCIM provisioning protocol architectures.
- Deep structural understanding of zero-trust network principles, cloud application architectures, security boundary perimeters, and lifecycle tracking metrics.
- Mandatory certification: Okta Certified Professional/Consultant OR SailPoint Certified IdentityNow/IdentityIQ Engineer.
Preferred Qualifications
- Prior scripting proficiency utilizing JavaScript, Python, or PowerShell to extend platform workflows, automate bulk user transitions, or parse system API logs.
- Familiarity with Privileged Access Management (PAM) architectures like CyberArk or BeyondTrust.
Skills Required
- 4 to 8 years of core enterprise IT security experience
- At least 3 years of dedicated implementation and configuration experience with Okta or SailPoint
- Okta Certified Professional or Consultant certification, or SailPoint Certified IdentityNow or IdentityIQ Engineer certification
- Strong technical mastery of SAML, OIDC, OAuth, LDAP, Active Directory, and SCIM
- Understanding of zero-trust principles, cloud application architectures, security boundaries, and identity lifecycle tracking
- Scripting proficiency in JavaScript, Python, or PowerShell
- Familiarity with CyberArk or BeyondTrust privileged access management architectures
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
FyerX is a Bengaluru-based digital marketing agency that helps businesses strengthen their online presence and generate leads and sales. Its services span branding, logo and brand-guideline development, photography and video production, UI/UX design, website development, social media marketing, search engine optimization, email marketing, ecommerce marketing, and digital advertising across platforms such as Google, Facebook, Instagram, and YouTube.
