Senior Identity Engineer - IT Risk and Security

About the role

As Senior Identity Engineer for IT Risk and Security, you will be a senior hands-on engineer responsible for operating, improving, automating, securing and troubleshooting the enterprise identity platforms the firm depends on. The estate of platforms include Identity Providers, legacy directory services, enterprise PKI, privileged access management, modern authentication and identity governance tooling, alongside legacy platforms now being retired.

What you'll do

• Operate and troubleshoot Active Directory in large, complex, multi-domain and multi-forest environments, including domain controllers, DNS and name resolution
• Serve as a senior escalation point for complex identity incidents — authentication failures, provisioning issues, certificate-related outages
• Plan, execute, validate and document production identity changes, including risk assessment, implementation steps, rollback planning, stakeholder coordination
• Grow the joiner, mover and leaver lifecycle — provisioning and deprovisioning driven from authoritative HR sources
• Support PKI and certificate lifecycle operations as they relate to identity services — TLS certificates, certificate-based authentication

What you need

• 5–9 yrs of experience
• IAM
• Active Directory
• Root cause analysis
• REST APIs
• SOP writing
• Reconciliation
• M.Sc or B.Tech or B.E. or B.Sc or BCA or M.Tech or MCA

Good to have

• CISSP
• CISM
• ITIL
• PowerShell
• Internal audit