IAM SSO Engineer

Job Title IAM SSO MFA L3 Engineer SME

This is a technical role requiring the engineer to design implement troubleshoot and manage enterprise Identity and Access Management solutions with a strong focus on Single SignOn SSO MultiFactor Authentication MFA

The engineer will work closely with application owners infrastructure teams security teams and thirdparty vendors to enable secure authentication and improve the organizations Zero Trust capabilities

Work Location Pune or Chennai preferred

Shift Timings Willingness to work in 24x5 supportoncall rotation including night shifts

Key Responsibilities

Provide L3 technical support and SMElevel expertise for SSO MFA and identity authentication issues

Respond to and resolve IAM incidents and service tickets within defined SLAs following established processes and procedures

Perform daytoday tasks across IAM platforms such as Active Directory Azure AD

Design implement and troubleshoot SSO integrations for enterprise and SaaS applications

Configure and manage SSO using SAML 20 OAuth 20 and OpenID Connect OIDC protocols

Configure and troubleshoot Microsoft Entra ID Enterprise Applications Application Registrations Service Principals authentication policies and related configurations

Implement and manage MFA and Conditional Access policies based on security and business requirements

Troubleshoot complex authentication issues involving SSO MFA federation claims tokens certificates and application configuration

Perform application onboarding to SSO including requirements gathering configuration testing UAT and production implementation

Work with application owners and vendors to resolve authentication and integration issues

Support identity federation and integration with externalSaaS applications

Configure and troubleshoot claims and attribute mappings including usergroup attributes required by applications

Monitor authentication activity and investigate authentication failures using Entra ID logs and security monitoring tools

Identify opportunities to automate repetitive IAMSSOMFA activities and improve operational efficiency

Develop and maintain technical documentation configuration standards troubleshooting guides and operational procedures

Maintain accurate ticket documentation ensure appropriate ticket updates and maintain SLAs

Provide technical guidance and mentoring to L2 IAM engineers

Participate in major incident resolution and provide rootcause analysis for recurring authentication issues

Ensure solutions follow security compliance and Zero Trust principles

Skills and Qualifications

Work Experience Minimum 10 years of handson experience in IAM Identity Engineering with significant handson experience in SSO and MFA

3 years of L3SMElevel experience supporting enterprise IAMSSO environments

Education Bachelors degree in computer science or a related field

Required Skills

oStrong handson experience with Microsoft Entra ID Azure AD

oStrong experience implementing and troubleshooting SSO and MFA solutions

oHandson experience with SAML 20 OAuth 20 and OIDC

oExperience with Entra ID Enterprise Apps App Registrations and Service Principals

oStrong understanding of Conditional Access MFA authentication methods and identity protection

oExperience with claims attributes token configuration certificates and federation concepts

oExperience integrating enterprise applications with Entra ID or other Identity Providers

oStrong troubleshooting skills using authenticationsignin logs and applicationside logs

oUnderstanding of Active Directory and hybrid identity environments

oExperience with PowerShell or scripting for IAM automation

oGood understanding of IAM RBAC least privilege Zero Trust and identity lifecycle concepts

oGood knowledge of ITIL practices and experience with ServiceNow

Good to Have Skills

oExperience with thirdparty Identity Providers or federation platforms

oExperience integrating SaaS and externally hosted applications with enterprise IAM platforms

oSCIMbased user provisioning and application lifecycle management

oKnowledge of PKI certificates TLS and application authentication dependencies

Soft Skills

oStrong communication skills Clearly communicate with team members users and other technical teams both verbally and in writing Strong documentation skills

oAnalytical troubleshooting mindset Ability to understand problems ask the right questions identify root causes and follow structured troubleshooting steps

oCustomer service orientation Ability to handle user issues professionally and provide a positive support experience

oTime priority management Ability to manage multiple SSO implementations and technical priorities simultaneously while meeting defined SLAs and prioritizing securitycritical issues

oTeam col

Skills

Mandatory Skills : CYBERARK
Good to Have Skills : Microsoft Copilot for Security, PAM, PAM EPM