Job Description
We are excited to announce an opening for Senior IAM Developer at Zurich India.
Please find below the details of the role and its responsibilities.
Skills Required:
IAM, Identity Access Management, Okta, Okta Access Gateway, auth0, 0auth, Azure
Conditional Access, Azure, Entra ID, EntraID, CIAM, Customer Identity Access
Management
Experience Range:
10 - 12 years
Job Description:
Senior IAM Developer:
Job Summary:
The Senior IAM Developer is responsible for engineering, enhancing, and integrating
Zurich’s global Workforce IAM and Customer Identity and Access Management (CIAM)
capabilities to enable secure, resilient, and scalable access to applications and digital
services.
This role delivers secure by design IAM, CIAM, and Conditional Access solutions across
cloud and on prem environments, with a strong emphasis on Zero Trust enforcement,
customer identity journeys, automation, identity lifecycle management, and access
governance.
The role works closely with IAM product owners, architects, cybersecurity, application
teams, and strategic vendors and is engineering led, with no primary responsibility for day
to day operational support.
Key Responsibilities:
IAM & CIAM Engineering and Solution Delivery:
• Design, develop, and enhance Workforce IAM and CIAM solutions across Okta, Okta
Auth0, Okta Access Gateway, Microsoft Entra ID (Azure AD), and Conditional Access.
• Engineer authentication solutions supporting Zero Trust and CIAM use cases,
including MFA, password less authentication, adaptive and risk based access,
privileged access, and customer identity flows.
• Design and implement secure authentication, authorization, and federation patterns
using SAML 2.0, OAuth 2.0, OpenID Connect, and SCIM.
• Deliver identity lifecycle and access models for workforce users, partners, and
customers, including CIAM sign up, sign in, profile management, and consent flows.
CIAM (Customer Identity) Enablement – Okta Auth0:
• Design and implement CIAM architectures using Okta Auth0 for customer facing and
digital applications.
• Engineer secure and scalable customer authentication flows, including social identity
providers, progressive profiling, step up authentication, and fraud aware access
controls.
• Define CIAM patterns that balance security, regulatory compliance, and customer
experience.
• Partner with digital application teams to integrate Auth0 into customer platforms and
APIs.
• Ensure CIAM implementations align with privacy, data protection, and regulatory
requirements (e.g., consent, minimal data collection).
Conditional Access & Zero Trust Enablement:
• Design, implement, and continuously improve Conditional Access policies aligned with
Zurich security standards and Zero Trust architecture.
• Define scalable Conditional Access patterns for workforce users, privileged roles,
devices, applications, and workload identities.
• Engineer policy automation, validation, and safe deployment mechanisms to reduce
risk and configuration drift.
• Partner with security and architecture teams to evolve baseline protections and Zero
Trust strategy.
Platform Engineering & Automation:
• Develop automation using APIs, SDKs, scripting, and configuration as code to improve
IAM and CIAM platform reliability and efficiency.
• Support CI/CD pipelines and controlled promotion of IAM, CIAM, and Conditional
Access changes across environments.
• Contribute to platform upgrades, new feature adoption, and continuous reduction of
technical debt across Okta, Auth0, and Entra ID.
• Proactively implement engineering improvements that enhance security, resilience,
and scalability.
Application & Cloud Integration:
• Partner with application teams to design and deliver secure IAM, CIAM, and
Conditional Access integrations for SaaS, cloud, custom, API based, and legacy
applications.
• Lead IAM and CIAM technical assessments during application onboarding, migrations,
and cloud transformations.
• Validate IAM and CIAM designs to ensure production readiness, security compliance,
and user experience.
• Resolve complex federation and access challenges across hybrid and multi tenant
environments.
Security, Risk & Architecture Alignment:
• Ensure all IAM, CIAM, and Conditional Access solutions comply with Zurich security
policies, architectural standards, and regulatory requirements.
• Implement controls supporting least privilege, strong authentication, continuous access
evaluation, and defense in depth.
• Provide technical input to risk assessments, audits, security reviews, and regulatory
engagements.
• Contribute to threat modeling and design decisions related to identity compromise,
customer fraud, and access abuse scenarios.
Technical Leadership & Collaboration:
• Act as a senior technical authority and mentor for IAM engineers and developers.
• Collaborate with IAM architects and product owners to influence platform roadmaps,
CIAM strategy, Conditional Access standards, and solution direction.
• Work with strategic vendors and partners (e.g., Okta/Auth0, Microsoft) to support
advanced integrations and feature adoption.
• Provide engineering level guidance during complex IAM and CIAM incidents and
escalations.
Documentation & Continuous Improvement:
• Maintain technical designs, integration standards, CIAM and Conditional Access
guidelines, and engineering runbooks.
• Contribute to post implementation and post incident reviews from a solution and
architecture perspective.
• Continuously evaluate IAM and CIAM technologies to improve security posture,
service quality, and developer experience.
Additional Information:
• Operates in a global IAM and CIAM environment with cross regional collaboration.
• Occasional participation in after hours releases for IAM, CIAM, or Conditional Access
may be required.
Technical Skills:
• Extensive experience (typically 8+ years) in IAM and/or CIAM engineering within a
large enterprise environment.
• Strong hands on experience with Okta Workforce IAM and Okta Auth0 (CIAM) and/or
Microsoft Entra ID Conditional Access.
• Deep understanding of Zero Trust architecture, CIAM patterns, authentication,
authorization, and identity lifecycle management.
• Proven experience with SAML, OAuth, OpenID Connect, and SCIM.
• Experience developing integrations using APIs, scripting, or programming languages
(Java, .NET, Python, PowerShell, JavaScript).
• Experience supporting cloud first, SaaS, API driven, and hybrid identity architectures.
Soft Skills:
• Strong analytical mindset with a security first, customer aware engineering approach.
• Ability to clearly articulate complex IAM, CIAM, and Conditional Access designs to
diverse stakeholders.
• Comfortable operating in a global, regulated, and risk focused environment.
• Strong collaboration, influencing, and stakeholder management skills.
• High standards of ownership, accountability, and engineering excellence.
Education:
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or
equivalent professional experience.
Candidate Data Privacy Notice:
Applicability of This Notice: This job posting relates to opportunities with Zurich Digital
International Private Ltd. (“Zurich”) and is published with the support of ANSR Inc.,
(“ANSR”) an authorised recruitment service provider engaged by Zurich for its hiring
activities.
Participation in the Recruitment Process: When you apply for this role, personal data
provided as part of your application (such as your name, email address, contact details,
address, financial information, background information, medical history, and details of
previous employers/employment) is collected for the purposes of recruitment and
selection and may be reviewed by Zurich, and transferred/disclosed to Zurich’s affiliates,
subsidiaries, and related entities and ANSR (“Transferees”), solely for recruitment and
selection purposes (in accordance with their respective privacy policies).
The Transferees maintain at least the same level of protection for your data as maintained
by Zurich, and do not further transfer/disclose/share or publish your data.
