Join Iris Software, recognized as one of India's Top 25 Best Workplaces in the IT industry, and contribute to a dynamic, award-winning culture. As a fast-growing IT services company, Iris empowers its associates to shape their success stories and realize their full potential. We are a trusted technology partner for enterprise clients across financial services, healthcare, transportation & logistics, and professional services, delivering complex, mission-critical applications using cutting-edge technologies like Cloud, DevOps, and AI/ML.

At Iris, your career is a launchpad for growth. Our Employee Value Proposition, "Build Your Future. Own Your Journey.," underscores our commitment to providing ownership and opportunities for career shaping. We foster an environment where your potential is valued, your voice matters, and your work drives real impact through cutting-edge projects, personalized development, and continuous learning.

Lead and manage IAM AWS projects, ensuring robust identity and access management solutions.

Implement and architect solutions involving Amazon IAM, Networking & Connectivity (VPC, Route 53, Direct Connect), and AWS messaging services (SNS, SQS).

Develop and deploy solutions using API Gateway, S3, EBS, RDS, DynamoDB, EC2, Auto Scaling, Load Balancing, EKS, ECS, and Terraform/CloudFormation.

Collaborate with cross-functional teams to embed identity-first principles within the DevSecOps lifecycle.

Possess a strong hands-on IAM engineering background with comprehensive expertise in tooling, protocols, identity management, authentication, authorization, and federation.

Demonstrate expertise in single sign-on, OAuth2, OIDC, PKI, PSD2 SCA knowledge, and possession-based authentication. ForgeRock developer experience with PingGateway, PingAM, PingIDM, and PingDS is highly desirable, including JavaScript coding for scripted routes and authentication tree nodes.

Exhibit strong hands-on coding skills in JavaScript or Java, with the ability to design extensible IAM APIs for seamless integration. Experience implementing PingGateway SSO routes, dynamic proxies, filter chains, or PingIDM data links is a plus.

Possess working knowledge of implementing PingAM custom authentication trees and integrating with threat sensors. Familiarity with adaptive and step-up authentication, and data links to internal/external LDAPS, JDBC, SOAP, and HTTPS sources is advantageous.