Senior Compliance Engineer

Razorpay was founded by Shashank Kumar and Harshil Mathur in 2014. Razorpay is building a new-age digital banking hub (Neobank) for businesses in India with the mission is to enable frictionless banking and payments experiences for businesses of all shapes and sizes. What started as a B2B payments company is processing billions of dollars of payments for lakhs of businesses across India. 

We are seeking an experienced Identity and Access Management (IAM) Engineer to join our team. The ideal candidate will have a strong background in IAM technologies, with particular expertise in Privileged Access Management (PAM) and Privileged Identity Management (PIM). You will be responsible for designing, implementing, and maintaining our organization's comprehensive access landscape.

Responsibilities

• Design, implement, and maintain IAM solutions, including PAM and PIM systems
• Develop and enforce identity and access policies across the organization
• Implement and manage role-based access control (RBAC) and attribute-based access control (ABAC) systems
• Configure and maintain identity lifecycle management processes
• Implement and manage single sign-on (SSO) and multi-factor authentication (MFA) solutions
• Conduct regular access reviews and audits to ensure compliance with security policies
• Design and implement security controls for identity lifecycle management, access provisioning, and de-provisioning
• Collaborate with internal audit teams to provide evidence of compliance during audits
• Monitor and report on IAM key performance indicators (KPIs) and key risk indicators (KRIs)
• Implement and manage role-based access control (RBAC) and attribute-based access control (ABAC) systems with a focus on least privilege principles
• Conduct periodic access reviews and certifications to maintain compliance
• Develop and maintain IAM-related security documentation, including policies, standards, and procedures
• Implement and manage security information and event management (SIEM) integration for IAM systems
• Stay updated on evolving compliance requirements and security threats related to IAM

Requirements

• Bachelor's degree in Information Security, Computer Science, or a related field
• 5+ years of experience in IAM, with a strong focus on compliance and security
• In-depth knowledge of relevant compliance frameworks (e.g., SOX, HIPAA, GDPR, PCI DSS)
• Experience with IAM governance, risk management, and compliance (GRC) processes
• Strong understanding of information security principles and best practices
• Hands-on experience with leading IAM platforms (e.g., Okta, Azure AD, Ping Identity)
• Familiarity with PAM and PIM solutions (e.g., CyberArk, BeyondTrust, Thycotic)
• Experience with identity lifecycle management and access governance
• Knowledge of security protocols and standards (e.g., SAML, OAuth, OpenID Connect)
• Familiarity with SIEM tools and security analytics
• Excellent analytical and problem-solving skills
• Strong communication skills, with the ability to explain complex technical concepts to non-technical stakeholders
• Relevant certifications such as CISSP, CISM, CISA, or vendor-specific certifications are highly desirable