Analyst - IAM SSO Engineer

Overview

The Identity and Access Management (IAM) Engineer will be a mid-level technical resource responsible for implementing, integrating, and supporting authentication solutions across on-premises and cloud environments. This role requires strong hands-on experience with SSO, MFA, application integrations, infrastructure components, cloud platforms, and scripting to support secure and reliable authentication services.

The ideal candidate is hands-on, technically strong, and able to troubleshoot complex authentication, integration, and infrastructure issues with limited guidance.

This role is based out of Hyderabad, India and requires coming into the office.

Responsibilities

Implement and support authentication solutions across SSO, MFA, and identity federation use cases.Ensure seamless user authentication experiences across applications and platforms.Configure and integrate applications with IAM platforms such as Okta, Auth0, PingFederate, or similar access management tools.Support authentication capabilities such as user registration, self-service, authentication, authorization, administration, audit, and reporting.Integrate applications using modern protocols such as SAML, OAuth 2.0, OIDC, and header-based authentication.Support IAM platform improvements that align with security, infrastructure, and business requirements.Identify opportunities for improving the SSO/Okta environment and implement enhancements.Work with application, infrastructure, cloud, security, and development teams to gather requirements and implement effective authentication solutions.Configure access policies, sign-on policies, MFA rules, and risk-based authentication controls based on business and security requirements.Collaborate with stakeholders to define and maintain authentication standards.Conduct regular system audits to ensure performance and compliance with security standards.Knowledge of regulatory compliance standards and experience with audit support activities.Partner with Cybersecurity, API, application, and infrastructure teams to document authentication patterns, integration standards, and troubleshooting steps.Stay current with emerging security threats, technologies, and industry trends to continuously improve the security posture.Assesses current applications and architecture to ensure current implementations align with industry guidelines, best practices and management approved standards.Develop and maintain scripts or automation to simplify IAM operations, reporting, monitoring, and integration support activities.Provide advanced production support to diagnose and resolve authentication, SSO, MFA, integration, agent, network, and infrastructure-related issues.Participate in incident response and security incident investigations related to IAM systems.Develop and deliver applicable documentation, training, and knowledge transfer to both internal and external stakeholders.Evaluate and hands on implement automation capabilities to simplify processes and deliver value/cost savings to the business.Foster the Agile DevOps culture through the latest toolset to improve customer satisfaction through rapid, continuous delivery.

Qualifications

Minimum Qualifications:

6+ years of overall IT experience4+ years of hands-on experience supporting authentication, SSO, MFA, or access management solutions4+ years of hands-on experience with Okta, Auth0, PingFederate, Azure AD/Entra ID, or comparable access management tools3+ years of scripting or automation experience using PowerShell, Python, JavaScript, REST APIs, or similar technologiesWorking knowledge of infrastructure, networking, cloud, and DevOps concepts used to support authentication platformsOkta Certified Administrator or equivalent IAM certification preferredBS/BA degree or equivalent experienceSecurity, cloud, or CIAM certifications are a plusExperience with CIC/Auth0 platform is a plus.

Preferred Qualifications:

Proven track record in implementing IAM solutions in a large, complex environment. Strong understanding of federated authentication, SSO, and SAML along with the ability to make recommendations, scope, and execute on opportunities for automation or improvement in identity system architecture.Hands-on experience implementing authentication services in enterprise environments.Experience supporting IAM or CIAM implementation activities, including requirements review, configuration, testing, and deployment.Proven track record of understanding B2B and B2C customer needs and delivering solutions that enhance user experience while maintaining security and compliance standards.Thorough understanding of security best practices, privacy regulations (such as GDPR, CCPA), and compliance requirements related to customer data protection.Broader IAM domain experience with focus on information securityDeep technical expertise in solutioning and integrating B2B, B2C applications with CIAM.Strong working knowledge of IAM platforms such as Okta, PingFederate, Auth0, Azure AD/Entra ID, or similar tools used to enable SSO for cloud and on-premises applications.Hands-on experience building SSO integrations using SAML, OAuth 2.0, OIDC, header-based authentication, and federation patterns.Experience in designing Consumer identity and access management solutionsStrong understanding of the latest security principles like zero trust and passwordless authentication to implement new standards in the authentication model.Must have working knowledge of Okta Lifecycle Management and Administrative APIsExperience with solutions like CyberArk, Beyond Trust, RSA or comparable products.Excellent understanding of REST integration conceptsExperience in directory services like Oracle LDAP, and ADExperience supporting authentication services in cloud environments such as AWS, Azure, or hybrid infrastructure.Hands-on scripting or development experience using JavaScript, Python, PowerShell, Java, Node.js, REST APIs, or similar technologies.Hands on experience with JavaScript, Python, Ruby, PowerShell, or other scripting languages preferred.Exposure to CI/CD pipelines and deployment automation in Azure or AWS.Experience with automation tools such as Ansible, Terraform, or similar infrastructure-as-code tools is preferred.Experience in Monitoring tools like Splunk, ELK, Prometheus, or similar toolsExperience with container technologies Docker, KubernetesExperience with Linux and Windows platforms, middleware, web servers, load balancers, agents, certificates, and network troubleshooting. Experience developing workflows, custom connectors, and troubleshooting complex issues. Experience with Agile and DevOps tools and methodologiesMinimum Okta Certified Administrator: Okta Certified Consultant and/or Okta Certified Developer preferred.CISSP / CIAM Certification is a plus.Experience in Auth0 and SiteMinder is preferred.

Non-Technical skills:

Exceptional communication and interpersonal skills with the ability to influence and collaborate with diverse stakeholders. Deliver outcomes with a little supervision, must be a self-starter and self-motivator.Strong analytical, problem-solving, and decision-making skills, with the ability to manage complex and competing priorities. Strong project management and organizational skills, with the ability to deliver high-quality results.Ability to think strategically and suggest creative solutions.Ability to synthesize complex requirements into simple business practices.Flexible and able to adapt to changing priorities.