Manager - Identity and Access Management

Location: Gurugram, Haryana, India

Remote Type: Hybrid

Time Type: Full time

Job Description

About Our Company

Ameriprise India LLP has been providing client based financial solutions to help clients plan and achieve their financial objectives for 20 years. We are part of Ameriprise Financial Inc., a US financial planning company headquartered in Minneapolis with a global presence and diversified financial services leader with more than $1.5 trillion in assets under management, administration and advisement as of year-end 2024. The firm’s focus areas include Asset Management and Advice, Retirement Planning and Insurance Protection.

Be part of an inclusive, collaborative culture that rewards you for your contributions, and work with other talented individuals who share your passion for doing great work. You’ll also have plenty of opportunities to make your mark at the office and a difference in your community. So, if you're talented, driven and want to work for a strong, ethical company that cares, take the next step and create a career at Ameriprise India LLP.

Job Description

Looking for a highly skilled IAM Engineering Manager with deep expertise in Microsoft Azure Cloud, Identity and Access Management (IAM), and enterprise security platforms. The ideal candidate will have strong hands-on experience in Azure implementation, configuration, development, automation, and production support, along with expertise in Broadcom SiteMinder SSO, Broadcom API Gateway, Identity Management (IDM), Authentication, Authorization, Federation, and Access Governance solutions.

Key Responsibilities

• Own and lead 24x7 operational support of the enterprise IAM platform, ensuring high availability, stability, performance, and compliance of critical identity services.
• Provide end-to-end platform support for IAM infrastructure, including Broadcom SiteMinder, API Gateway, Identity Manager (IDM), Azure Entra ID, Active Directory, Authentication, and Access Management services.
• Ensure adherence to service availability, SLA, SLO, incident response, problem management, and change management processes for all IAM shared services.
• Lead Major Incident (P1/P2) management, root cause analysis, post-incident reviews, and implementation of preventive measures.
• Monitor, maintain, and optimize IAM infrastructure health through proactive capacity management, performance tuning, health checks, and operational automation.
• Drive operational excellence by reducing MTTR, improving platform reliability, and automating routine support and maintenance activities.
• Manage support for cloud-based IAM services across Azure and AWS, including identity lifecycle management, federation, MFA, Conditional Access, Privileged Access, and governance solutions.
• Coordinate with global infrastructure, cloud, security, and application teams to ensure seamless support for business-critical IAM platforms and services.
• Participate in rotational on-call support and provide leadership during critical production events, outages, disaster recovery exercises, and platform upgrades.
• Establish and maintain operational runbooks, knowledge articles, support procedures, recovery plans, and platform documentation.
• Drive IAM automation using PowerShell, Terraform, Azure Automation, ARM/Bicep templates, and Infrastructure as Code (IaC) practices.
• Lead cloud authentication and authorization integrations leveraging SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and JWT-based security models.
• Support cloud security initiatives involving Zero Trust Architecture, Adaptive Access Controls, Risk-Based Authentication, and Identity Threat Detection.

Required Qualifications

• 14+ years of overall IT experience with at least 10+ years in Identity & Access Management and 3+ years leading IAM Engineering, Operations, or Platform Support teams in enterprise-scale environments.
• This will position the role clearly as a senior IAM Engineering Manager responsible for Azure, AWS, Broadcom IAM Platforms, 24x7 production support, cloud identity modernization, and people leadership.

Preferred Qualifications

• Hands-on experience with Microsoft Entra ID (Azure AD), Azure MFA, Conditional Access, Identity Governance, PIM, Access Reviews, Entitlement Management, and B2B/B2C identity solutions.
• Strong expertise in AWS IAM, AWS Organizations, IAM Roles, Identity Federation, AWS SSO/Identity Center, and cloud security best practices.
• Experience with modern IAM platforms such as Okta, Ping Identity, SailPoint, CyberArk, Saviynt, ForgeRock, Microsoft Entra ID, and Broadcom IAM Suite.
• Experience implementing SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, Kerberos, LDAP, and REST API security frameworks.
• Experience with Infrastructure as Code (IaC) tools including Terraform, Ansible, ARM, and Bicep.
• Experience supporting cloud-native workloads on Azure and AWS, including Kubernetes, AKS, EKS, Docker, and container security.
• Knowledge of Zero Trust security architecture, Identity Security, PAM, CIEM (Cloud Infrastructure Entitlement Management), and Identity Governance & Administration (IGA).
• Experience with cloud monitoring and observability platforms such as Azure Monitor, Log Analytics, Application Insights, Dynatrace, Splunk, and Sumo Logic.
• Azure certifications such as AZ-104, AZ-305, AZ-500, SC-300, SC-100 and AWS certifications are highly preferred.

In-Office Collaboration
We are a client-centric, relationship-based business. Working together, in-person, is foundational to how we achieve results. By fostering a culture of face-to-face collaboration, idea sharing, productivity and personal connection, we deliver for our stakeholders — clients, advisors, employees and shareholders. Our employees work in the office at least three (3) days per week, with flexibility to work from home two (2) days per week. Some roles may require additional in-office time or different in-office expectations, and specific requirements will be discussed during the hiring process.
 

Full time(2:00p-10:30p)AWMPO AWMP&S President's OfficeTechnology

Ameriprise India LLP is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, genetic information, age, sexual orientation, gender identity, disability, military status, veteran status, marital status, pregnancy, family status or any other basis prohibited by law.

We are committed to fostering an inclusive and accessible recruitment process for individuals with disabilities. If you require a reasonable accommodation to participate in the application or interview process, speak to your recruiter to discuss how we can support you.