IAM Support Engineer - Lead

Who We Are – MassMutual India
Since 1851, MassMutual’s commitment has always been to help people protect their families, support their communities, and help one another. Therefore, we want to inspire people to Live Mutual. We at MassMutual value diversity and inclusion. We’re people helping people
A career with us means you will work alongside exceptional people and be empowered to reach your professional and personal goals.  Our employees are the foundation of what makes MassMutual a strong, stable, and ethical business.  We seek and value unique and varied perspectives and experiences because we believe we are stronger when all voices are heard. We invite you to bring your bright, innovative ideas to MassMutual as we continue to help millions of Americans rely on each other.
Together, we’re stronger.

Job Description

Job Title: IAM Support Engineer - Lead
Location: Hyderabad

 Role Overview

• Lead and support enterprise IAM operations across IGA (SailPoint), IAM (Okta), and PAM platforms
• Responsible for end-to-end IAM lifecycle, access governance, and platform operations
• Drive team delivery, incident resolution, onboarding, and compliance activities
• Act as a point of contact for IAM operations and stakeholder coordination

Key Responsibilities

IAM Operations & Platform Support

• Oversee daily IAM operations across SailPoint / Okta / PAM platforms
• Ensure platform stability, availability, and SLA adherence
• Monitor and resolve:
  • Access requests
  • Incidents
  • IAM-related issues
• Coordinate with engineering teams for escalations and fixes

IGA (SailPoint / Saviynt) Operations

• Manage identity lifecycle (JML) across enterprise systems
• Support:
  • Access provisioning / de-provisioning
  • Certifications / access reviews
  • Role and entitlement management
• Oversee application onboarding and integrations into IGA platforms
• Monitor aggregation, correlation, and provisioning workflows

Okta IAM Operations

• Support SSO, MFA, and authentication workflows using Okta
• Manage:
  • User lifecycle
  • Groups, roles, and policies
• Troubleshoot authentication, federation (SAML/OIDC), and access issues

PAM (Privileged Access Management)

• Support PAM tools (CyberArk / BeyondTrust / etc.)
• Manage:
  • Privileged account onboarding
  • Access controls and session management
• Ensure least privilege and secure privileged access practices

Application Onboarding & Integration

• Lead or support onboarding of applications into IAM platforms
• Work with application teams to:
  • Define access models
  • Configure integrations
  • Validate entitlements and workflows
• Ensure smooth go-live and post-onboarding support

Incident Management & Troubleshooting

• Act as primary escalation point for IAM incidents
• Perform:
  • Root cause analysis (RCA)
  • Issue resolution and preventive actions
• Support major incident handling and production stabilization

Audit, Compliance & Governance

• Support:
  • Access certifications
  • Audit evidence and compliance reporting
• Ensure adherence to:
  • IAM policies
  • Security standards
  • Regulatory requirements
• Drive remediation for audit findings

Team Leadership & Coordination (2+ Years Required)

• Lead a team of IAM operations/support engineers
• Allocate tasks and track daily/weekly deliverables
• Ensure SLA adherence and quality of delivery
• Mentor and guide team members on IAM processes and tools
• Coordinate with:
  • Business teams
  • Security stakeholders
  • Vendors and global teams

 Process Improvement & Reporting

• Identify opportunities for automation and optimization
• Improve IAM processes and reduce operational inefficiencies
• Track and report:
  • SLA metrics
  • Incident trends
  • Access governance KPIs

Required Qualifications

Experience

• 8+ years of IAM experience (end-to-end IAM exposure mandatory)
• Minimum 2 years of team handling / leadership experience
• Experience working in enterprise IAM / security operations environments

Technical Skills (Mandatory)

• Strong hands-on experience with:
  • SailPoint (IdentityNow / IIQ) or Saviynt (IGA)
  • Okta IAM (SSO, MFA, Federation)
  • PAM tools (CyberArk / BeyondTrust / similar)
• Deep understanding of:
  • Identity lifecycle (JML)
  • Access provisioning and workflows
  • Access certifications and governance

Why Join Us?
We’ve been around since 1851. During our history, we’ve learned a few things about making sure our customers our top priority. In order to meet and exceed their expectations, we must have the best people providing the best thinking, products, and services. To accomplish this, we celebrate an inclusive, vibrant, and diverse culture that encourages growth, openness, and opportunities for everyone. A career with MassMutual, Great Place to Work® certified and India's Best Workplaces in BFSI 2023 - Top 50 organization means you will be part of a strong, stable, and ethical business with industry leading pay and benefits. And your voice will always be heard.
Does this sound like a great fit? Apply today!