# Associate Staff IAM Support Analyst > Weekday AI · Hyderabad, India · Full-time · Posted 2026-09-04 **Salary:** INR 2,000,000–3,000,000 **Workplace:** on_site **Department:** Weekday's Client via platform ## Description 𝗧𝗵𝗶𝘀 𝗿𝗼𝗹𝗲 𝗶𝘀 𝗳𝗼𝗿 𝗼𝗻𝗲 𝗼𝗳 𝘁𝗵𝗲 𝗪𝗲𝗲𝗸𝗱𝗮𝘆'𝘀 𝗰𝗹𝗶𝗲𝗻𝘁𝘀 𝗦𝗮𝗹𝗮𝗿𝘆 𝗿𝗮𝗻𝗴𝗲: 𝗥𝘀 𝟮𝟬𝟬𝟬𝟬𝟬𝟬 - 𝗥𝘀 𝟯𝟬𝟬𝟬𝟬𝟬𝟬 (𝗶𝗲 𝗜𝗡𝗥 𝟮𝟬-𝟯𝟬 𝗟𝗣𝗔) Experience: 10+ yrs Location: Hyderabad Job Type: Full-time We are looking for a highly experienced **IAM Developer** to engineer, enhance, and integrate global **Workforce Identity and Access Management (IAM)** and **Customer Identity and Access Management (CIAM)** solutions. The role focuses on building secure, resilient, and scalable identity capabilities across cloud and on-premises environments. The ideal candidate will have deep hands-on expertise in **Okta Workforce IAM, Okta Auth0, Microsoft Entra ID, Conditional Access, Zero Trust, identity lifecycle management, authentication, authorization, and federation**. This is an engineering-focused role with an emphasis on solution delivery, automation, application integration, and continuous platform improvement rather than day-to-day operational support. ## Requirements ### Key Responsibilities - Design, develop, and enhance **Workforce IAM and CIAM solutions** using Okta, Okta Auth0, Okta Access Gateway, and Microsoft Entra ID. - Engineer secure authentication solutions supporting **Zero Trust, MFA, passwordless authentication, adaptive and risk-based access, privileged access, and customer identity journeys**. - Design and implement authentication, authorization, and federation solutions using **SAML 2.0, OAuth 2.0, OpenID Connect, and SCIM**. - Develop identity lifecycle and access models for workforce users, partners, and customers. - Design and implement **CIAM architectures using Okta Auth0** for customer-facing applications and digital platforms. - Build secure customer authentication journeys including social identity, progressive profiling, step-up authentication, and consent management. - Integrate Auth0 with customer platforms, APIs, SaaS applications, and digital services. - Design solutions that balance **security, privacy, regulatory compliance, and customer experience**. - Design and continuously improve **Microsoft Entra ID Conditional Access** policies aligned with Zero Trust principles. - Develop scalable Conditional Access patterns for users, privileged roles, devices, applications, and workload identities. - Implement automation for policy validation, controlled deployment, configuration management, and reduction of configuration drift. - Develop IAM and CIAM automation using **APIs, SDKs, scripting, and configuration-as-code**. - Support CI/CD pipelines and controlled promotion of IAM, CIAM, and Conditional Access changes across environments. - Contribute to platform upgrades, feature adoption, technical-debt reduction, and engineering improvements across identity platforms. - Partner with application teams to deliver secure IAM and CIAM integrations across **cloud, SaaS, API-based, custom, and legacy applications**. - Lead technical IAM/CIAM assessments for application onboarding, migrations, and cloud transformation initiatives. - Troubleshoot and resolve complex federation, authentication, and access challenges across hybrid and multi-tenant environments. - Ensure identity solutions comply with security policies, architecture standards, privacy requirements, and regulatory controls. - Support least privilege, strong authentication, continuous access evaluation, and defence-in-depth security principles. - Contribute to threat modelling, risk assessments, security reviews, audits, and identity-related regulatory engagements. - Act as a senior technical authority and mentor for IAM engineers and developers. - Collaborate with architects, product owners, security teams, and technology vendors to influence IAM and CIAM roadmaps. - Maintain technical designs, integration standards, engineering guidelines, and implementation runbooks. - Participate in post-implementation and post-incident reviews and drive continuous engineering improvements. ### What Makes You a Great Fit - **10+ years of experience** in IAM, CIAM, identity engineering, cybersecurity, or a closely related domain, preferably within large enterprise environments. - Strong hands-on expertise with **Okta Workforce IAM and Okta Auth0 (CIAM)** and/or **Microsoft Entra ID Conditional Access**. - Deep understanding of **Zero Trust architecture, authentication, authorization, federation, CIAM patterns, and identity lifecycle management**. - Strong experience with **SAML, OAuth, OpenID Connect, and SCIM**. - Proven experience designing and developing IAM/CIAM integrations using **APIs, SDKs, scripting, or programming languages** such as Java, .NET, Python, PowerShell, or JavaScript. - Strong understanding of cloud-first, SaaS, API-driven, hybrid, and multi-tenant identity architectures. - Experience with MFA, passwordless authentication, adaptive authentication, privileged access, and risk-based access controls. - Hands-on experience with customer identity journeys including registration, authentication, profile management, consent, and step-up authentication. - Strong understanding of Conditional Access policy design, automation, governance, and Zero Trust enforcement. - Experience integrating identity platforms with enterprise applications and digital services. - Strong understanding of identity security, privacy, access governance, and least-privilege principles. - Strong analytical and problem-solving skills with a **security-first and customer-aware engineering mindset**. - Excellent communication skills with the ability to explain complex identity architectures to technical and non-technical stakeholders. - Strong collaboration, influencing, and stakeholder-management abilities. - Comfortable working in a **global, regulated, and risk-focused environment**. - High level of ownership, accountability, and commitment to engineering excellence. - Bachelor's degree in **Computer Science, Information Technology, Cybersecurity**, or a related discipline, or equivalent professional experience. - Willingness to participate in occasional after-hours releases or global engineering activities when required. ## Apply [Apply at Weekday AI](https://apply.workable.com/weekday-1/j/1A8010146A/apply) --- Powered by [Workable](https://www.workable.com)