Consultant IAM Developer | Thoughtworks | Contract to hire

Any TWs office; Hybrid - 3 days in office

Contract to hire

5-9 years experience required

CTC - 8lpa - 15lpa

Key Responsibilities

Design and maintain IAM microservices and automation pipelines (Python + AWS Lambda).

Manage identity lifecycle workflows based on upstream system events, integrated with Okta.

Develop and maintain tooling for user provisioning, group management, and deprovisioning.

Lead the migration of IAM CI/CD processes from Seed.run to CircleCI.

Implement and maintain Okta Workflows, Hooks, Policies, and MFA mechanisms.

Support IAM-related audits, security practices (secret rotation, patching), and compliance reviews.

Troubleshoot tech debt and support Identity critical services built as wrappers using okta and Google apis

Collaborate with Workplace IT teams to scale L1/L2 support across regions.

Must-Have Skills

4+ years of experience in backend development, with at least 2 years in IAM or security automation.

Strong hands-on experience with Python (for microservices and automation).

Proven knowledge of AWS services: Lambda, API Gateway, DynamoDB, S3, CloudWatch.

Deep understanding of IAM principles: lifecycle, access policies, federated auth (SAML, OIDC, OAuth), and MFA.

Solid experience with Okta (especially Workflows, Hooks, and group management).

Familiarity with CI/CD pipelines, Git, and Infrastructure-as-Code tools (Terraform or CloudFormation).

Ability to troubleshoot identity data flows, handle escalations, and debug cloud-based systems.

Nice to Have

Experience with AWS Config, CloudTrail, Security Hub, or WIZ/Snyk, security related tasks

Familiarity with event-driven architectures and serverless design.

Experience integrating identity services with similar access control frameworks.

Exposure to MDM tooling and identity-device bridging.

Prior experience supporting IAM-related audits or compliance reviews.

Soft Skills

Excellent problem-solving and communication skills.

Ability to work independently and asynchronously in a globally distributed team.

Comfortable collaborating across functions (InfoSec, Workplace IT, Product).