About the position:

Chevron invites applications for the role of Digital Identity Engineer within our Identity Product Teams in India. The team is responsible for packaging the identity technology solutions into a cohesive offering for applications and managing the migration to on and off premise cloud. The team is also responsible for integrating the multiple Cloud strategies and initiatives at Chevron, deploying the mandated security expectations to the application teams, and influencing the Cloud migration planning to leverage the key technologies.

Key Responsibilities:

• Maintains Azure Active Directory (Azure AD) operations, encompassing user and group administration, directory synchronization, and identity protection mechanisms

• front-end portal web development initiatives

• Architect and develop APIs to facilitate seamless service-to-service interoperation and automation

• Architect and enforce role-based access control (RBAC/ABAC) and conditional access policies to guarantee secure and compliant resource access

• Engineer and deploy multi-factor authentication (MFA) and single sign-on (SSO) solutions to bolster security and enhance user experience

• Configure and manage advanced security protocols such as OAuth, SAML, and OpenID Connect to ensure robust authentication and authorization

• Develop and maintain sophisticated automation scripts using PowerShell or other scripting languages to optimize IAM processes and minimize manual intervention

• Ensure adherence to regulatory requirements and internal policies pertaining to identity and access management

• Serve as the engineering point of contact for operational team escalations, resolving IAM-related incidents and issues through comprehensive troubleshooting and root cause analysis

• Demonstrate a profound understanding and capability in implementing Public Key Infrastructure (PKI) and encryption solutions

Required Qualifications:

• Must have bachelor’s degree in computer science engineering or related field

• 0-5 years experience

• Over all 5 years’ experience with minimum 3 years with identity and access management or a related field

• Must have Microsoft AZ-900 Certification

• Microsoft SC-300 Certification & SC-900 Certification

• Proficient in interpreting requirements and delivering solutions that adhere to target architecture frameworks

• Extensive knowledge and hands-on experience with identity resiliency and cybersecurity measures, including Entra ID Protection and Defender

• Skilled in utilizing Ansible for pipeline automation

• Advanced proficiency in Azure Active Directory and Entra ID

• In-depth understanding and practical experience with Privileged Access Management (PAM) solutions

• Competent in scripting languages such as Python and PowerShell

• Thorough understanding of Zero Trust principles and identity protection strategies

• Experienced in implementing hybrid identity solutions and integrating on-premises with cloud-based systems

• Capable of developing automated processes for user access provisioning and de-provisioning

• Well-versed in security standards and regulatory requirements pertinent to identity and access management

• Exceptional analytical and problem-solving abilities to diagnose and resolve identity and access-related issues

Chevron ENGINE supports global operations, supporting business requirements across the world. Accordingly, the work hours for employees will be aligned to support business requirements. The standard work week will be Monday to Friday. Working hours are 8:00am to 5:00pm or 1.30pm to 10.30pm.

Default Terms and Conditions

We respect the privacy of candidates for employment. This Privacy Notice sets forth how we will use the information we obtain when you apply for a position through this career site. If you do not consent to the terms of this Privacy Notice, please do not submit information to us.

Please access the Global Application Statements, select the country where you are applying for employment. By applying, you acknowledge that you have read and agree to the country specific statement.

Terms of Use