IAM Specialist

Job Description – IAM Specialist

Job Title: IAM Specialist – Customer Identity / CIAM
Experience: 6+ Years
Location: Bangalore / Hyderabad / Kochi

Job Summary

We are looking for an experiencedIAM Specialist with strong expertise inCustomer Identity and Access Management (CIAM) and modern authentication protocols. The candidate will be responsible for implementing, configuring, supporting, and troubleshooting customer authentication and authorization solutions for banking/financial-services applications.

The role requires strong hands-on knowledge ofOAuth 2.0, OpenID Connect, JWT, MFA, PKCE, FAPI 2.0, identity federation, SSO, and API security.

Key Responsibilities

• Implement, configure, and supportCustomer Identity / CIAM solutions.
• Design and troubleshoot customer authentication and authorization flows usingOAuth 2.0 and OpenID Connect (OIDC).
• Work withJWTs, including claims, signatures, expiry, issuer (iss), audience (aud), access tokens, and refresh tokens.
• Troubleshoot real-time customer authentication, authorization, token, and session-related issues in production.
• Implement and supportMFA, PKCE, secure client patterns, and token/session lifecycle management.
• ApplyFAPI 2.0 authentication and authorization patterns for financial-services applications.
• Integrate IAM solutions with APIs, web/mobile applications, identity providers, and enterprise systems.
• Configure and supportidentity federation and SSO for customer-facing applications.
• Work closely with application, API, security, and development teams to resolve authentication and authorization issues.
• Support API security fundamentals related to customer authentication and access tokens.
• Develop and maintainrunbooks, SOPs, troubleshooting guides, and technical documentation.
• Support audit, compliance, security reviews, and evidence collection.
• Participate in critical incident handling and escalation for customer identity issues.
• Perform root-cause analysis and recommend improvements to authentication and authorization mechanisms.

Core Technical Skills

• Customer Identity / CIAM
• Auth0 or equivalent CIAM platforms
• OAuth 2.0
• OpenID Connect (OIDC)
• JSON Web Tokens (JWT)
• FAPI 2.0
• MFA
• PKCE
• Access Token / Refresh Token lifecycle
• Session management
• Secure client authentication patterns
• Identity Federation
• SSO
• API Security
• REST APIs
• SAML 2.0

Required Experience

• 6+ years of experience in IAM / Identity Security.
• 3–5+ years of hands-on experience with CIAM/customer identity solutions or equivalent IAM platforms.
• Strong production experience troubleshootingOAuth/OIDC authentication and authorization issues.
• Strong understanding ofJWT, token validation, claims, expiry, issuer and audience.
• Experience withMFA, PKCE and secure authentication patterns.
• Familiarity withFAPI 2.0, preferably within banking or financial-services environments.
• Experience withcustomer-facing web/mobile applications and APIs.
• Strong experience withSSO and identity federation.
• BFSI / banking experience is preferred.

Preferred Certifications

• Auth0 / Okta certification
• Microsoft Entra ID / Azure Identity certification
• Cloud security or IAM certifications

Good to Have

• Banking / financial-services domain experience
• CIAM architecture experience
• API gateway / API security experience
• Experience with mobile authentication
• Experience with risk-based authentication
• Knowledge of Zero Trust and modern identity security
• Experience preparing audit/compliance evidence