Senior IAM Engineer

Skip to main content.

View More Jobs

Senior IAM Engineer

Hyderabad, Telangana, India(Hybrid)

Job Description

We're looking specifically for folks who place an emphasis on usable security and scaling

successfully through automation. Fanatics is a fast-growing company, and our security program

needs to be able to keep pace with that growth while not disrupting innovation.

As an IAM Engineer, you will be responsible for the overall strategy, planning, development &

support of Fanatics’ IAM solutions and its associated processes. You will provide overall

implementation and direction into the IAM functions across the organization, including

federation, privileged access management, authentication & authorization, certificate

management, security and provisioning identity data.

The IAM Engineer will work as part of Security team, and will work closely with service desk,

systems engineering, network security, audit, application developers and other engineers in

creating functional, scalable and secure IAM operations as well as the design and development

of new business applications. They will also be responsible for identifying, evaluating and

participating in decision making around new and emerging IAM technologies and will support

other areas of Information Security as needed.

Responsibilities

•  Lead the implementation and development process for the Identify and access

• Management (IAM) program with a security focus.

•  Work with vendors and business partners to develop, implement and manage the IAM

• program.

•  Lead program design and review working directly with business lines on the integration

requirements including provisioning, de-provision, and identity lifecycle into the IAM

• platforms.

•  Develop strategy roadmaps for the IAM systems and the IAM program, develop

• enterprise-wide standards for IAM.

•  Implement or coordinate remediation required by policies, standards, reviews, and

• audits, documenting exceptions as necessary.

•  Define the user access security model for all systems and platforms. Enforcing least-

• privilege model.

•  Provide subject matter expertise in multiple domain focus areas including but not

• limited to: Privileged Access Management and Secrets Management tooling such as

• CyberArk, Delinea, HashiCorp

•  Operation and maintenance of the Privileged Access Management and Secrets

• Management platforms to support various business use cases, providing in-depth

• technical consultation to business application development team to ensure

• development of efficient application systems

•  Support PAM Security Strategy including provisioning, password management and

• access policies, SSH key management, API key management and reporting.

•  Privileged Access Management (PAM)

•  PAM implementation and operationalization. Support the operation of the PAM

• platform to ensure secure and efficient operation and usage for all lines of

• business

•  PAM administration: Manage and mature the PAM platform including safe

• design, policy configuration, and session isolation for privileged accounts.

•  Credential lifecycle: Own automated password/secret rotation, onboarding of

• privileged and service accounts, and just-in-time access workflows to reduce

• standing privilege.

•  Certificate/PAM convergence: Support the integration of certificate lifecycle

• operations into the PAM platform, leveraging automation to reduce manual

• certificate handling.

•  Auditing & reporting: Produce privileged access usage reports and support audit

• evidence requests for SOC 2, PCI DSS, and ITGC controls.

•  Integrate PAM solution with various technologies. Provide security consultation

• on internal projects focusing on business needs, security's role in change

• management, and how data is transmitted internally and externally.

•  Design, configure, and maintain PAM solutions for Linux and Windows tools.

•  Access Management

•  Access governance: Support periodic access certifications, least-privilege

• reviews, and segregation-of-duties analysis in partnership with Access

• Governance and GRC teams.

•  RBAC/ABAC design: Define and maintain role-based and attribute-based access

• models for critical applications.

•  Provisioning integrations: Build and maintain SCIM, API, and directory-based

• integrations connecting HR systems, Active Directory, and downstream

• applications.

•  Certificate Management:

•  Lifecycle ownership: Manage issuance, renewal, revocation, and inventory of

• internal and external TLS/SSL certificates across cloud and on-prem

• environments.

•  Automation: Build automated monitoring and renewal pipelines to eliminate

• expiration-driven outages, integrating with CyberArk and internal CI/CD tooling.

•  PKI hygiene: Maintain certificate authority relationships, key management

• standards, and rotation policies aligned to industry best practice.

•  SSO & Identity

•  Platform administration: Configure and maintain Okta as the enterprise SSO and

• MFA provider, including application integrations (SAML, OIDC, Oauth, SWA),

• policies, and group rules.

•  Authentication engineering: Implement adaptive MFA, conditional access

• policies, and passwordless authentication initiatives.

•  App onboarding: Partner with application and engineering teams to onboard

• new applications into Okta, including custom OIDC/SAML integrations for

• internal tools.

•  AI identity operations: Support emerging identity controls for AI agents and

• machine identities, including scoped OAuth tokens and service-to-service

• authentication.

•  Lead IAM engineering strategy and execution, set the direction for engineering efforts,

• drive technology selection (Including bus vs build decision) and act as the functional

• technical leader during implementation.

•  Establish CIEM, ITDR, IGA strategy, implementation and operationalization

•  Evaluate and monitor project efforts, timelines, and task management

• EDUCATIONAL REQUIREMENTS:

•  Bachelor’s degree in computer science, Information Systems, or equivalent combination

• of education and experience

•  Relevant Security Certifications

• EXPERIENCE REQUIRED:

•  A minimum of 5 years of experience.

QUALIFICATIONS, KNOWLEDGE, SKILLS & ABILITIES

•  Experience designing, implementing, and managing complex IAM Solutions

•  Strong understanding on Identity and privileged constructs within Cloud environments.

•  An understanding and demonstrated use of DevOps tools (Bit bucket, Gitlab, Github, Jenkins,

• Automated deployment tools) with CI/CD capabilities.

•  Experience in designing and implementing PAM solutions such as (BeyondTrust, CyberArk,

• Delinea) for enterprise organizations.

•  Experience with password safe tools such as BeyondTrust Password safe and Powerbroker for

• both Windows and Linux environments.

•  Experience with databases, LDAP and directory services, application servers, operating systems

• and network infrastructure.

•  Strong understanding of Identity Lifecycle in regard to privileged accounts and how people use

• accounts.

•  Experience with Zero Trust Security

•  Proficiency in Active Directory, LDAP, SAML, OAuth, IdPs

•  Demonstrate an advanced understanding of troubleshooting and configuring Privileged

• applications, Privileged ID Management, and API integrations.

•  An understanding of the emerging authorization mechanisms based on Zanzibar/ReBAC.

•  Experience with CIEM, ITDR and IGA platforms

•  Maintain documentation related to IAM processes, configurations, incident response

• procedures and run books.

•  Working knowledge of certificate management / PKI concepts (TLS, CA hierarchies, key

• rotation).

•  Experience with configuration management tools like Terraform, Ansible, etc.

•  Experience with cloud technologies, e.g. AWS, Azure, GCP, OCI

•  Advanced programming experience (Python, Go, etc.)

• General skills include:

•  Strong critical thinking and analytical skills

•  Ability to approach problem solving in a constructive and collaborative way that does

• not require absolute security.

•  The ability to communicate complicated technical issues and risks to programmers,

• network engineers and managers.

•  Strong leadership, project, and team-building skills

•  Exceptional communication skills with diverse audiences; the ability to be an

• infrastructure security subject matter expert who can explain relevant topics to general

• audiences.

About Us

Fanatics is building a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

About the Team

Fanatics Commerce is a leading designer, manufacturer, and seller of licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods. It operates a vertically-integrated platform of digital and physical capabilities for leading sports leagues, teams, colleges, and associations globally – as well as its flagship site, www.fanatics.com .

Fanatics Commerce has a broad range of online, sports venue, and vertical apparel partnerships worldwide, including comprehensive partnerships with leading leagues, teams, colleges, and sports organizations across the world—including the NFL, NBA, MLB, NHL, MLS, Formula 1, and Australian Football League (AFL); the Dallas Cowboys, Golden State Warriors, Paris Saint-Germain, Manchester United, Chelsea FC, and Tokyo Giants; the University of Notre Dame, University of Alabama, and University of Texas; the International Olympic Committee (IOC), England Rugby, and the Union of European Football Associations (UEFA).

At Fanatics Commerce, we infuse our BOLD Leadership Principles in everything we do:

· Build Championship Teams

· Obsessed with Fans

· Limitless Entrepreneurial Spirit

· Determined and Relentless Mindset

Apply Now

Job Info

• Posting Date07/08/2026, 04:11 AM
• LocationsFlat No-402 M Residency, Hyderabad, TS, 500081, IN(Hybrid)
• Job ScheduleFull time
• Regular or TemporaryRegular

Similar Jobs

American English

• American English

• Español

• Français canadien

• Italiano

• 日本語

• Nederlands

• Português do Brasil

• Thai

• Tiếng Việt

• 简体中文

• 繁體中文

• Fanatics Corporate

• Commerce

• Collectibles

• Betting & Gaming

Select “Accept” to agree to Fanatics and our partners storing/accessing information on your device (e.g., unique IDs) through cookies and other technologies to measure the site usage, provide Personalized ads and content, ad and content measurement, audience insights and product development. Select “Decline” to decline use of non-essential cookies. See Our Privacy Notice for more information..

AcceptDecline

Are You Still With Us?

It seems you've been gone for a while. For security reasons we will end your session automatically in 03:00 unless you would like to continue working.

End SessionContinue Working

Work Summary

This summary is generated by AI Assist. Click inside the summary text box to make changes as necessary.

DiscardAdd Summary

Page Senior IAM Engineer - Fanatics Careers loaded