IAM Application Migration & Test Engineer

About the role

Provide hands-on application assessment, Microsoft Entra ID SSO/MFA integration, testing and migration capability for the Bank's expanded application scope. The role shall support migration of the 27 applications currently integrated with Falaina, assess and onboard the 80+ applications currently outside the central IAM platform where technically feasible, support user MFA migration/re-registration, and provide testing and rollout support for Windows Hello for Business.

Key responsibilities

• Assess each of the 27 existing Falaina-integrated applications, including authentication protocol, SSO/MFA configuration, claims/attributes, user population, dependencies, certificates, URLs, environments and business criticality.
• Support migration of the 27 Falaina-integrated applications to Microsoft Entra ID through assessment, configuration, test-case preparation, technical testing, UAT support, production cutover, rollback readiness and hypercare.
• Review the 80+ applications currently not onboarded to the central IAM platform and capture technical information required to determine Entra ID SSO/MFA integration feasibility.
• Classify applications by integration readiness and recommended authentication approach, and identify prerequisites, blockers, exceptions and dependencies requiring remediation or escalation.
• Configure and/or assist application teams with Microsoft Entra Enterprise Applications and application side SSO using SAML 2.0, OpenID Connect/OAuth 2.0 or other approved methods.
• Configure and validate claims, attributes, group/role mappings, redirect/reply URLs, certificates, metadata, user/group assignment and other SSO parameters.
• Implement and validate Entra MFA and Conditional Access requirements for onboarded applications in accordance with approved standards and under technical guidance from the Entra Architect.
• Prepare detailed application-specific SIT/UAT test cases covering positive and negative authentication, SSO, MFA, claims/roles, disabled/locked users, session behaviour, logout, access restrictions, fallback and rollback.
• Conduct technical testing, collect evidence, log defects, coordinate remediation/retesting and support application/business owners during UAT.
• Support an application migration factory approach to assess, configure, test and migrate/onboard multiple applications in parallel according to risk, readiness and business criticality.

About you

• Degree or diploma in Computer Science, Information Technology, Cybersecurity or equivalent.
• Minimum 5 years of IAM, application integration or security engineering experience with strong hands on SSO/MFA integration and testing.
• Mandatory demonstrable experience migrating or onboarding enterprise applications to Microsoft Entra ID Enterprise Applications.
• Strong practical experience with SAML 2.0 and OpenID Connect/OAuth 2.0, claims/attribute mapping, certificates and application troubleshooting.
• Experience developing IAM test cases, coordinating SIT/UAT and supporting enterprise MFA registration/migration is required.
• WHfB testing/rollout exposure is an added advantage.
• SC-300 Identity Access Admin Associate or relevant Microsoft/cloud/application security certification is preferred.