About this role
We never ask for payment as part of our selection process, and we always contact candidates via our corporate accounts and platforms. If you are approached for payment, this is likely to be fraudulent. Please check to see whether the role you are interested in is posted here, on our website.
TMF Group is a leading global provider of high-value business services to clients operating and investing globally. We focus on providing specialized and business-critical financial and administrative services that enable our clients to operate their corporate structures, finance vehicles and investment funds in different geographical locations.
TMF India is a Great Place to Work, ISO & ISAE certified organization.
Discover the Role
The Identity & Access Management (IAM) Engineer is responsible for supporting the design, implementation, administration, and continuous improvement of Identity and Access Management solutions across the organization. The role focuses on ensuring secure access to enterprise systems through effective identity lifecycle management, access governance, authentication, authorization, and user provisioning processes.
The IAM Engineer works closely with HR, Cybersecurity, IT Operations, Application Owners, and business stakeholders to manage user access, automate Joiner-Mover-Leaver (JML) processes, support compliance requirements, and maintain IAM platforms.
Key Responsibilities
Identity & Access Management Engineering
- Configure, administer, and support IAM and Identity Governance (IGA) platforms.
- Support onboarding of applications into IAM solutions.
- Configure connectors, workflows, roles, entitlements, and approval processes.
- Implement and maintain identity lifecycle management processes.
- Support automation of Joiner, Mover, and Leaver (JML) activities.
- Strengthen Role-Based Access Control (RBAC) and access governance frameworks.
- Troubleshoot provisioning failures, synchronization issues, and IAM integrations.
User Access Management
- Provision, modify, and deprovision user access across enterprise applications.
- Manage access requests and entitlement assignments.
- Ensure access activities comply with security policies and standards.
- Support privileged access and segregation of duties controls.
Authentication & Access Services
- Support Single Sign-On (SSO) implementations.
- Assist with Multi-Factor Authentication (MFA) administration.
- Manage authentication and authorization integrations.
- Support identity directories and federation services.
Governance, Risk & Compliance
- Support access review and certification campaigns.
- Collect and maintain audit evidence.
- Assist with compliance assessments and remediation activities.
- Ensure IAM controls align with organizational and regulatory requirements.
BAU Operations Support
- Resolve IAM incidents, service requests, and operational issues.
- Monitor IAM queues, connectors, workflows, and system health.
- Maintain operational documentation, runbooks, and knowledge articles.
- Meet service level agreements (SLAs) for IAM activities.
Stakeholder Engagement
- Collaborate with HR, IT Operations, Cybersecurity, Application Owners, and business teams.
- Communicate access-related risks, issues, and requirements effectively.
- Support project delivery and identity governance initiatives.
- Work effectively within global and cross-functional teams.
Continuous Improvement
- Identify opportunities for process automation and optimization.
- Support IAM platform enhancements and security improvements.
- Stay updated on IAM technologies, emerging security risks, and industry best practices.
Key Requirements
Experience
- 3+ years of experience in: Identity & Access Management (IAM)
- Identity Governance & Administration (IGA)
- IT Security
- Access Management
- Cybersecurity Operations
IAM & IGA Platforms
Hands-on experience with one or more of:
- SailPoint
- Microsoft Entra ID (Azure AD)
- Saviynt
- Okta
- Ping Identity
- Similar IAM/IGA solutions
Identity Lifecycle Management
Strong understanding of:
- Joiner-Mover-Leaver (JML) processes
- User onboarding
- User transfers and role changes
- User offboarding
- Access revocation and certification
Access Management
Experience with:
- User provisioning and deprovisioning
- Access request management
- Entitlement management
- Access reviews and certifications
- Privileged access concepts
Authentication & Authorization
Knowledge of:
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- SAML
- OAuth
- OpenID Connect (OIDC)
- LDAP
- Active Directory / Entra ID
Access Governance
Understanding of:
- Role-Based Access Control (RBAC)
- Birthright Access
- Segregation of Duties (SoD)
- Access Governance Controls
- Compliance and Audit Requirements
Technical Skills
Preferred exposure to:
- PowerShell
- SQL
- REST APIs
- Automation and scripting
- Directory synchronization
- IAM connectors and integrations
What’s in it for you?
Pathways for career development
- Work with colleagues and clients around the world on interesting and challenging work.
- We provide internal career opportunities, so you can take your career further within TMF.
- Continuous development is supported through global learning opportunities from the TMF Business Academy.
Making an impact
- You’ll be helping us to make the world a simpler place to do business for our clients.
- Through our corporate social responsibility program, you’ll also be making a difference in the communities where we work.
A supportive environment
- Strong feedback culture to help build an engaging workplace.
- Regardless of where you are in your career, TMF Group opens a world of opportunity where you will be part of our team and is supported in your global career journey.
- Our inclusive work environment allows you to work from our offices around the world, as well as from home, helping you find the right work-life balance to perform at your best.
- At TMF Group, it’s our people who make us who we are. Our company thrives on entrepreneurial spirit and is full of proactive people who combine enthusiasm with responsibility and accountability.
Other Benefits
- Anniversary & Birthday Leave policy
- Be part of One TMF
- Paternity & Adoption leaves
- Salary advance policy
- Work flexibility – Hybrid work model
- Talk about growth opportunities (we invest in talent)
- Well-being initiatives
We’re looking forward to getting to know you!