Project description

We are seeking an experienced Azure Privileged Identity Management (PIM) Senior Engineer to drive the design, implementation, automation, and governance of privileged access management within Microsoft Entra ID (Azure AD) and Azure environments. This role requires a highly skilled identity professional with proven expertise in managing Azure PIM end-to-end, including privileged role governance, access lifecycle management, automation, compliance, and security controls.
The ideal candidate will have hands-on experience implementing and operating Azure PIM in large-scale enterprise environments, developing automation using Terraform, Git, Ansible, PowerShell, and Python and customizing federation integrations through CI/CD pipelines. The candidate should possess deep knowledge of privileged identity governance, Service Principal lifecycle management, Managed Identity administration, and privileged access controls aligned with Zero Trust principles.
This role will partner closely with Identity & Access Management, Cloud Engineering, Cybersecurity, DevOps, and Compliance teams to ensure privileged access is managed securely, efficiently, and in accordance with enterprise security standards.

Responsibilities

Lead the design, implementation, configuration, and ongoing administration of Microsoft Entra ID (Azure AD) Privileged Identity Management (PIM).

Manage privileged access controls across Microsoft Entra ID, Azure subscriptions, management groups, resource groups, and Azure resources.

Define and maintain privileged access governance policies, standards, operational procedures, and security controls aligned with enterprise requirements.

Design and implement Just-In-Time (JIT) access, role eligibility, approval workflows, access reviews, Privileged Access Groups, and role activation policies.

Perform privileged access assessments, role reviews, recertifications, and remediation of excessive or inappropriate access.

Develop, maintain, and enhance automation solutions using Terraform, Git, CI/CD Pipelines, Ansible, PowerShell, and Python for identity and privileged access management.

Build reusable Infrastructure-as-Code (IaC) modules and deployment frameworks for Azure PIM, role assignments, Service Principals, Managed Identities, and related identity governance controls.

Design, customize, and support federation integrations and authentication workflows using automated CI/CD pipelines.

Manage and troubleshoot federation configurations, claims transformations, token issuance policies, and authentication-related issues.

Develop and maintain REST API-based integrations and automation workflows for identity lifecycle management.

Manage the complete lifecycle of Service Principals, Enterprise Applications, and Managed Identities, including provisioning, governance, credential management, and decommissioning.

Implement and manage secrets, certificates, credential rotation, expiration monitoring, and secure authentication practices for non-human identities.

Automate onboarding, access assignment, certification, and retirement processes for privileged and service identities.

Monitor privileged access activities and maintain reporting, dashboards, and audit evidence to support security, compliance, and operational requirements.

Support internal and external audits, security reviews, risk assessments, and compliance initiatives related to privileged access management.

Investigate and resolve identity, authentication, authorization, and privileged access issues across Azure environments.

Collaborate with IAM, Security, Cloud Engineering, DevOps, and application teams to implement secure and scalable access management solutions.

Drive continuous improvements in privileged access governance, identity security, automation, and operational efficiency.

Skills

Must have

7+ years of experience in Identity and Access Management (IAM) and Microsoft Azure environments.

Experience integrating identity security controls with enterprise DevSecOps practices

Terraform (Mandatory and Expert Level)

Git-Based Source Control and Automation Frameworks (Mandatory and Expert Level)

REST API Integrations and CI/CD Pipelines (Mandatory and Expert Level)

PowerShell (Mandatory and Expert Level)

Python (Mandatory and Expert Level)

Microsoft Certified: Identity and Access Administrator Associate (SC-300)

Microsoft Certified: Azure Security Engineer Associate (AZ-500)

Microsoft Certified: Azure Administrator Associate (AZ-104)

Experience supporting large enterprise or global Azure environments.

Experience implementing Zero Trust security principles.

Knowledge of cloud security, governance, and compliance frameworks.

Nice to have

Work in agile environment

Other

Languages

English: C1 Advanced

Seniority

Senior

Related jobs

View all vacancies

Technical Business Analyst

Cybersecurity

Romania

Bucharest

Cyber Hygiene Security Engineer / Developer

Cybersecurity

Romania

Bucharest

Information Security Specialist

Cybersecurity

Romania

Bucharest

Bengaluru, India

Req. VR-124770

Cybersecurity

Cross Industry Solutions

27/08/2026

Req. VR-124770

Apply for Azure PIM (Privileged Identity Management) Senior Engineer in Bengaluru

*Indicates a required field

First name

Last name

Your country

Your City

Phone

Specialization

Attach your resume (max file size 1MB; allowed extensions: doc, txt, pdf, docx) Upload resume

Number of years of experience in the specialization you are applying for

What are your monthly gross salary expectations?

Read Explanatory Notes

Under the terms of your specific consent or to perform our obligations under a contract with you, as applicable, we, Luxoft Holding Inc. will manually and electronically process your personal data, specifically your first name, last name, phone number, e-mail address and other data you provide us through this form.

Within this context, we process personal data only for the specific purpose(s) indicated in the individual consent language or other notices provided below.

We will – insofar as reasonably necessary for the purpose you have agreed to and within the scope of applicable laws – transfer your personal data to other entities within the Luxoft Group and to the group of third party recipients listed in our Privacy Notice. Such Recipients can be located outside the European Union (EU) and/or the European Economic Area (EEA) (“Third Countries”). The Third Countries concerned, e.g. the USA, may not have the level of data protection that you enjoy e.g. under the GDPR. This can result in disadvantages such as an impeded enforcement of data subjects’ rights, a lack of control over further processing and access by state authorities. You may only have limited legal remedies against this. Insofar our transfer of your personal data to recipients in Third Countries is not covered by an adequacy decision of the EU Commission, we achieve an adequate level of data protection as further detailed out in our Privacy Notice.

With your consent, we personalise marketing communications to you by way of carrying out marketing research analysis, analysing the surfing-behaviour of our website visitors and to adjust it to their detected tendencies, as well as to plan more efficient future marketing activities. This personalised marketing does not include any automated decision-making activities.

Further information on how we process personal data in general is available in our Privacy Notice. You may withdraw any given consent at any time. The withdrawal of your consent(s) will not affect the lawfulness of processing before its withdrawal. For any request in this context, please e-mail us at: DPO@luxoft.com.

Before uploading CV or any other information to this website, to learn more about your obligations and restrictions arising from the use of this website, please read our Terms of Use.

By clicking the Agree and Send button, you consent that Luxoft Holding Inc. can process your provided personal data for the purpose of processing your application to establish a potential employment, internship or relocation with Luxoft Holding Inc., a relevant affiliate of the Luxoft Group or Luxoft Group’s clients, as applicable. You consent to the retention of your personal data, with the purpose of contacting you for potential future employment opportunities. If you refer a friend, we will process your provided personal data of you and your referral to award you with a bonus for such recommendation. You can withdraw your consent at any time with effect for the future. Before you consent, please click on „Read these Explanatory Notes“ and view our Privacy Notice (e.g. for your data subject rights).

Note: Our system automatically converts each CV into our standardized format, enabling our HR teams to process applications more efficiently.

I consent that Luxoft Holding Inc. and the affiliates of the Luxoft Group can process my personal data for the purpose of sending me regular emails with information about Luxoft as an employer including job vacancies and (ii) marketing communications with information about recruitment-related events, organized webinars, conferences, as well as the Logeek Magazine and other similar publications. I can withdraw my consent at any time with effect for the future. These communications are personalised to my interests in accordance with our Privacy Notice.

Related Jobs

All jobs

MENU

Azure PIM (Privileged Identity Management) Senior Engineer

Project description

Responsibilities

Skills

Other

Related jobs

Technical Business Analyst

Cyber Hygiene Security Engineer / Developer

Information Security Specialist