IAM Engineer

About Our Company Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection. Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Azure IAM Engineer will be responsible for engineering, administration, automation, and operational support of enterprise Identity & Access Management platforms with a primary focus on Microsoft Entra ID (Azure AD), Active Directory, Azure MFA, SSO, Federation, and Identity Governance solutions. This role requires a strong DevOps mindset, automation expertise, and participation in a 24x7 rotational support model to ensure platform stability, security, and service availability.

Design, implement, administer, and support enterprise IAM solutions centered around Microsoft Entra ID (Azure AD), Active Directory, Azure MFA, Conditional Access, and Identity Governance. Integrate applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM provisioning standards. Provide L2/L3 production support for IAM platforms, ensuring high availability and adherence to SLA commitments. Monitor platform health, analyze incidents, perform root cause analysis (RCA), and implement preventive measures. Support onboarding of applications to SSO, MFA, and modern authentication platforms. Develop and maintain automation solutions using PowerShell, Microsoft Graph API, Python, or REST APIs to improve operational efficiency. Manage and support Entra ID lifecycle activities, authentication policies, Conditional Access policies, and access governance processes. Participate in incident, problem, change, and release management activities. Perform system health checks, trend analysis, capacity planning, and platform optimization. Collaborate with infrastructure, security, network, cloud, and application teams to resolve complex IAM issues. Support disaster recovery testing, resiliency exercises, and operational readiness activities. Contribute to CI/CD implementation and infrastructure automation initiatives. Create and maintain technical documentation, operational runbooks, SOPs, and knowledge articles. Participate in a 24x7 rotational shift model, including weekends and off-hours support when required. Drive continuous improvement initiatives and identify opportunities for automation and modernization within IAM services. Work closely with global onsite and offshore teams to deliver secure and scalable identity solutions.

Bachelor's degree in Computer Science, Information Technology, Engineering, or related discipline. 2-4 years of experience in Identity & Access Management and Production Support environments. Hands-on experience with: Microsoft Entra ID (Azure AD) Active Directory Azure MFA Conditional Access SSO & Federation Technologies Identity Governance & Lifecycle Management Strong understanding of SAML, OAuth 2.0, OpenID Connect (OIDC), and SCIM. Experience troubleshooting authentication, authorization, and identity federation issues. Strong scripting and automation experience using PowerShell, Python, or REST APIs. Experience supporting critical enterprise platforms in a 24x7 environment. Excellent analytical,