IAM Specialist - Federation Services

IAM Specialist - Federation Services
Todays world is fueled by vast amounts of information which means that data is even more valuable than ever before. Protecting data and information systems is central to doing business and therefore everyone in EY Information Security has an important role to play. Join a global team of almost 900 people who collaborate to support the business of EY by protecting EY and client information assets! Information Security professionals enable EY to work securely and deliver secure products and services as well as detect and quickly respond when things go wrong. Together the efforts of our dedicated team help protect the EY brand and build client trust.

Within Information Security we blend risk strategy digital identity cyber defense application security and technology service solutions as we consider the entire security lifecycle. You will join a team of hardworking security-focused individuals dedicated to supporting protecting and enabling the business through secure solutions and information systems.

The opportunity
Identity and Access Management (IAM) organization a part of Information Security which enables over 330000 individuals across 140 countries to access systems and information securely. As a member of the Identity and Access Management (IAM) team this position will contribute towards execution of an IAM roadmap that meets security requirements including but not limited to security for a complex Active Directory (AD) environment hybrid cloud deployment mobile computing policy driven security SSO identity lifecycle management and federation focusing on multiple protocols.

We offer opportunities to develop new skills and progress your career receiving support coaching and feedback from colleagues around the world. This role will give you an opportunity to work with some of the best talent in the industry!

Your key responsibilities

The IAM Specialist - Federation Services role maintains and supports EYs production Web Access Management & Federation platforms. Responsibilities include providing level 3 support services for various Federation technologies including Ping Federation Services Azure and other technologies. The team works with developers EY client teams Federation vendors and at times with end users. You will work on projects guided by project managers while working with IAM architects security consultants and various other teams. All while demonstrating your knowledge to help facilitate changes and improve on current processes. We focus on following standards policy process and documentation.

• Monitoring the health and maintaining infrastructure that are on both Linux and Windows servers
• Responding to incidents generated by monitoring alerts incidents and emails that have been escalated
• Contribute to projects with a focus on ensuring production readiness
• Validating that services are not interrupted after systems or configuration changes
• Administrating PING Federation and supporting Single Sign-On (SSO) infrastructure analyzing issue related to SSO and Multi-Factor Authentication (MFA)
• A strong customer focus with the ability to manage expectations appropriately to deliver a superior customer experience and build long-term relationships.
• Build relationships across all operational support teams
• Follow support model for escalations to other operational support teams and vendors

Skills and attributes for success

• Deep understanding of authentication/authorization flows: SAML OAuth2.0 OIDC WS-Fed and related terminologies
• Deep understanding on Azure AD Conditional Access application administration Role Based Access Control and Azure B2B
• Understanding application integrations for identify and access management and Multi-Factor Authentication (MFA)
• Knowledge on Microsoft Public Key Infrastructures Federated identity systems (Microsoft ADFS PingFederate. Etc.)
• Experience working on issues related to Federated Single Sign-on
• Hands on experience with various tools: Fiddler Chrome DevTools Splunk AppDynamics etc.
• Experience in PowerShell scripting Java Script Linux
• Understanding of general IT networking topology i.e. DNS load balance proxy reverse proxy etc.
• Maximize analytical and problem-solving skills to understand customer requirements to develop solutions to satisfy various business requirements
• Partner with other global support teams to address issues while collaborating with colleagues in other regions and countries
• Flexibility to work in a 24*7 support structure

To qualify for the role you must have

• Degree in Computer Science or related field or equivalent work experience
• Minimum of 5 years experience in Information Systems in a related role with tangible relevant and demonstrated operation experience with Identity Management Solutions
• 3 years of demonstrated experience with Ping Federate / CA Site Minder or similar products including configuration and support; or with similar Web Access Management (WAM) solutions

Certification Requirements:

• Azure certification for implementing Microsoft Azure Infrastructure Solutions will be an added advantage.

What we look for

• Problem-solver with the ability to think creatively
• Deep understand of Federation logic
• Strong English verbal and written communication skills
• Ability to work independently as well as within a team
• Ability to embrace change and adjust priorities or processes and approach as needed
• Highly self-motivated directed and can work independently without supervision in a high-pressure environment
  

What we offer
As part of this role you will work in a highly coordinated globally diverse team with the opportunity and tools to grow develop and drive your career forward. Here you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too focusing on your physical emotional financial and social well-being. Your recruiter can talk to you about the benefits available in your country. Heres a snapshot of what we offer:

• Continuous learning: You will develop the mindset and skills to navigate whatever comes next.
• Success as defined by you: We will provide the tools and flexibility so you can make a significant impact your way.
• Transformative leadership: We will give you the insights coaching and confidence to be the leader the world needs.
• Diverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs.