IAM Engineer

Inclusion without Exception

Tata Consultancy Services (TCS) is an equal opportunity employer, and embraces diversity in race, nationality, ethnicity, gender, age, physical ability, neurodiversity, and sexual orientation, to create a workforce that reflects the societies we operate in. Our continued commitment to Culture and Diversity is reflected in our people stories across our workforce and implemented through equitable workplace policies and processes.

Tata Consultancy Services (BSE: 532540, NSE: TCS) is the technology partner of choice for industry-leading organizations worldwide. Since its inception in 1968, TCS has upheld the highest standards of innovation, engineering excellence and customer service.

It has set an aspiration to become the world's largest AI-led technology services company and is enabling its clients to transform themselves across the full AI stack, from infrastructure to intelligence.

Rooted in the heritage of the Tata Group, TCS is focused on creating long term value for its clients, its investors, its employees, and the community at large. With a highly skilled workforce spread across 56 countries and 194 service delivery centers across the world, the company has been recognized as a top employer in six continents. With the ability to rapidly apply and scale new technologies, the company has built long term partnerships with its clients. Many of these relationships have endured into decades and navigated every technology cycle, from mainframes in the 1970s to artificial intelligence today.

IAM Engineer

Key Responsibilities

• Design and implement Azure Entra ID (formerly Azure AD) identity governance frameworks.

• Configure and manage Privileged Identity Management (PIM) for just-in-time privileged access.

• Implement and enforce Conditional Access policies, MFA, and phishing-resistant authentication (FIDO2, Passkeys).

• Manage RBAC role assignments across Azure subscriptions, resource groups, and management groups.

• Remediate guest user accounts, stale identities, and excessive permission assignments.

• Configure and maintain Break Glass (emergency access) accounts with monitoring and alerting.

• Integrate Microsoft Defender for Cloud governance rules with ServiceNow for ticketing workflows.

• Support cross-cloud IAM alignment across AWS IAM and OCI IAM where applicable.

• Participate in IAM audits, access reviews, and compliance reporting.

• Develop IAM runbooks, RBAC mapping documentation, and onboarding guides.

Required Qualifications

• IAM experience, with Microsoft Azure / Entra ID.

• Deep knowledge of Azure RBAC, PIM, Conditional Access, and Entra ID roles.

• Experience with MFA enforcement, authentication methods, and access policies.

• Understanding of identity lifecycle management and access certification processes.

• Familiarity with Microsoft Defender for Cloud and Secure Score recommendations.

• Experience with ServiceNow or ticketing system integrations for IAM workflows.

• Microsoft Certified: Identity and Access Administrator (SC-300) preferred.

• Strong documentation and stakeholder communication skills.

Nice to Have

• Experience with AWS IAM, Organizations, and SCPs.

• Knowledge of OCI IAM compartments and policy structures.

• Exposure to SASE or Zero Trust Network Access (ZTNA) frameworks.

Salary Range - CA$ 90,000 - CA$ 110,000 Per Year

TCS does not use artificial intelligence tools for candidate screening or evaluation. This post is for a current vacancy. The hiring process includes an initial screening, followed by a technical evaluation and managerial discussion.

Tata Consultancy Services Canada Inc. is committed to meeting the accessibility needs of all individuals in accordance with the Accessibility for Ontarians with Disabilities Act (AODA) and the Ontario Human Rights Code (OHRC). Should you require accommodation during the recruitment and selection process, please inform Human Resources.

Thank you for your interest in TCS. Candidates that meet the qualifications for this position will be contacted within a 2-week period. We invite you to continue to apply for other opportunities that match your profile.