{"id":2820485,"url":"https://alion.io/job/tech-mahindra-lead-security-engineer","title":"Lead Security Engineer","company":{"id":5484,"name":"Tech Mahindra","domain":"techmahindra.com","url":"https://alion.io/company/tech-mahindra","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Career site","truth_index":null},"role":"Security","role_family":"Security","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":21000,"max_usd":46000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Active Directory","optional":false},{"name":"Apache Kafka","optional":false},{"name":"Grafana","optional":false},{"name":"IAM","optional":false},{"name":"Keycloak","optional":false},{"name":"LDAP","optional":false},{"name":"Linux","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Prometheus","optional":false},{"name":"Rest API","optional":false},{"name":"SIEM","optional":false}],"status":"live","first_seen_at":"2026-10-18T16:28:59Z","employer_posted_date":"2026-10-18","last_verified_at":"2026-10-25T13:55:43Z","board_verified":true,"closed_at":null,"days_open":7,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":7},"description":"Job Description\n\nSkill Set :\nWSO2 Enterprise Integration\n\nTotal Experience :\n7.00 to 10.00 Years\n\nNo of Openings :\n1\n\nJob Post Date :\n18/09/2026\n\nJob Expiry Date :\n30/11/2026\n\nDomain :\nIT\n\nLocation :\nPUNE [India]\n\nJob Reference No :\n4107763\n\nJob Summary\n\n7‿12+ Years (Minimum 4‿6 Years in WSO2 Identity Server or Equivalent IAM Platforms)\nRole Overview\nWe are seeking an experienced IAM L3 / SME Engineer to lead the support, optimization, and governance of a WSO2 based Customer Identity and Access Management (CIAM) platform. The role will serve as the highest technical escalation point for identity services, authentication, SSO, MFA, federation, integrations, platform performance, and security operations.\nKey Responsibilities\nProvide L3 support and technical leadership for WSO2 Identity Server and CIAM services.\nManage and troubleshoot authentication, authorization, SSO, MFA, federation, and identity lifecycle issues.\nLead complex integrations with API Gateways, Keycloak, LDAP/AD, Kafka, SIEM, social identity providers, OTP platforms, and partner applications.\nPerform advanced troubleshooting of OAuth, OIDC, SAML, SCIM, JWT, certificate, keystore, API, and federation related issues.\nSupport platform upgrades, migrations, production cutovers, UAT, hypercare, and transformation initiatives.\nConduct root cause analysis (RCA), performance tuning, capacity planning, and service optimization.\nDefine operational standards, runbooks, SOPs, monitoring, and support processes.\nMentor L1/L2 engineers and coordinate with infrastructure, application, and vendor support teams.\nEnsure compliance with security best practices, audit requirements, and IAM governance standards.\n\nExpected Deliverables\nPlatform architecture and design review reports.\nRCA reports and problem management updates.\nSecurity hardening recommendations and implementation plans.\nPerformance optimization and capacity planning reports.\nIntegration design and validation documents.\nCIAM operational governance documentation.\nProduction readiness assessment reports.\nMigration, cutover, and hypercare support reports.\nKnowledge transfer and technical training documentation.\nContinuous service improvement recommendations and roadmap inputs.\nTechnical Skills Required\nStrong hands on experience with WSO2 Identity Server administration, configuration, troubleshooting, clustering, and integrations.\nExpertise in IAM/CIAM concepts, authentication, authorization, federation, MFA, consent management, and identity lifecycle management.\nAdvanced knowledge of:OAuth 2.0, OpenID Connect (OIDC)\nSAML 2.0, SCIM 2.0\nJWT/JWKS, PKCE\n\nExperience with Linux/RHEL, SSL/TLS, certificates, keystores, truststores, and networking.\nKnowledge of PostgreSQL, Oracle, REST APIs, LDAP/Active Directory, API Gateways, and Keycloak.\nExperience with Kafka, SIEM platforms, Prometheus, Grafana, and log analysis tools.\nStrong troubleshooting and RCA skills in enterprise production environments.\nWSO2 Certified Professional\nIAM/CIAM Certifications","description_format":"text","description_chars":3005,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Information Technology","Professional Services","Systems Integrators","Business Process Outsourcing (BPO)"],"lifecycle":[{"event":"open","at":"2026-10-18T16:28:59Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.684,"p_room":0.45,"age_days":6,"expected_fill_days":4,"reasons":["conf:1","velocity","win:tail","comp:brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/tech-mahindra-lead-security-engineer","json_url":"https://alion.io/job/tech-mahindra-lead-security-engineer.json","meta":{"generated_at":"2026-10-25T17:29:53Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":24824,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5484},"rest":"https://alion.io/mcp/rest/get_company?id=5484"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Ftech-mahindra-lead-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Ftech-mahindra-lead-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Ftech-mahindra-lead-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/tech-mahindra-lead-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Ftech-mahindra-lead-security-engineer"}]}