Security Engineer - Identity and Access at Rubrik in Bangalore, India

Job description

• Job Summary
• We are looking for an experienced and technically deep Identity and Access Management (IAM) Engineer to execute technical strategy across our entire Identity and Access Security management program. This domain spans a broad and increasingly complex set of disciplines, including Identity Governance & Administration (IGA), Access Management, Privileged Access Management (PAM), Non-Human Identity (NHI) security, and the emerging space of Agentic Identity security.
• This is fundamentally a hands-on role. You will be expected to personally design systems from the ground up and build automation that scales across a large and diverse application portfolio. At the same time, this role carries significant cross-functional weight: you will be partnering closely and continuously with Information Security, IT, Engineering and the many application-owning teams distributed across the company, driving the identity security initiatives in alignment with the overall business objectives.

Responsibilities

• Solution Design
• Design and build IAM solutions — including configurations, integrations, and workflows — that align with evolving business requirements, security policies and regulatory requirements (eg., SOX, GDPR).
• Application Onboarding & Integration
• Lead the onboarding of applications into IAM platforms, integrating across diverse systems including major cloud platforms, SaaS applications, and in-house systems.
• Build automation and policy-as-code frameworks
• Manage identity access policies as versioned, auditable code — using source control, CI/CD, and infrastructure-as-code to automate identity and access management changes instead of manual, ticket-driven processes.
• Deepen identity governance platform integrations
• Build and extend automated provisioning/deprovisioning, entitlement aggregation, and access certification workflows across the application portfolio.
• Privileged Access Management
• Design privileged access models across applications and endpoints — including session management and just-in-time elevation — to minimize standing access without slowing teams down.
• Non-human/Agentic identity governance
• Build inventory, risk-scoring, runtime policy enforcement and remediation tooling for service accounts, API keys, workload identities, AI agents etc
• IAM Platform Auditing & Posture Management
• Review and audit identity and access management platforms to identify security misconfigurations, strengthen security policies, and enforce industry best practices.
• Incident Response & Forensics Support
• Provide subject matter expertise during security incidents to support investigations into identity and access related events.
• On-Call Coverage & Escalations
• Engage in on-call rotations and provide technical escalation support outside standard business hours.
• Technical governance and design reviews
• Enforce technical standards across the team, evaluate identity related design proposals, and serve as the main escalation point for complex identity security decisions and integration challenges

Requirements

• Minimum of 6 years of experience in Identity and Access Management (IAM), with deep hands-on experience implementing and managing IAM solutions within leading cloud environments such as AWS, Azure, or Google Cloud Platform.
• Proficiency with modern identity platforms (e.g., SailPoint, Okta, CyberArk, or equivalents) and identity protocols such as SAML, OpenID Connect, and OAuth.
• Strong understanding of Identity Governance, Privileged Access Management (PAM) principles, Non-Human Identities/AI Identities and Access Certification processes.
• Proficiency in a general-purpose programming language (e.g., Python, Go), with experience in infrastructure-as-code (IaC) and CI/CD tooling (e.g., Terraform, GitHub Actions) preferred.
• Demonstrated experience designing least-privilege / RBAC or ABAC models at scale, and reasoning about tradeoffs between security posture and developer/user friction.
• Experience operating in a regulated environment (e.g., SOX) and translating control requirements into engineering work.
• Track record of technical leadership: driving cross-team design decisions, writing technical documentation.
• Effective communication skills, both written and verbal, with the ability to convey complex information clearly to technical and non-technical audiences.
• Strong analytical and problem-solving skills, with the ability to lead cross-functional collaborations and drive technical security initiatives.
• Ability to quickly learn, adapt, and lead in fast-paced and dynamic technical environments.

Skills

Required

• Identity and Access Management (IAM)
• Identity Governance
• Privileged Access Management (PAM)
• Non-Human Identities/AI Identities
• Access Certification processes
• Least-privilege / RBAC or ABAC models
• Regulated environment (SOX)
• Technical leadership
• Technical documentation

Preferred

• Infrastructure-as-code (IaC)