Description

You will design, implement, and maintain enterprise Single Sign-On (SSO) and identity management solutions. You own the security posture by engineering secure MFA, adaptive authentication, and risk-based access controls across hybrid environments.

This role is on-site.

Responsibilities

• Implement enterprise SSO using OneLogin and Microsoft Entra ID, including custom identity broker frameworks and federation workflows.
• Manage identity lifecycle automation with Python, PowerShell, and Shell scripting, including SCIM-based provisioning and de-provisioning.
• Configure and maintain Windows Server, VMware, and OpenShift environments, ensuring high availability and operational reliability.
• Conduct authentication and authorization threat modeling, managing Conditional Access policies and hybrid identity deployments.
• Administer infrastructure security, including TLS/SSL certificate lifecycle, patch management, and network hardening controls.

Required Skills

• 10+ years of experience in Identity and Access Management (IAM) and infrastructure engineering.
• Deep expertise with Microsoft Entra ID, OneLogin, OIDC, OAuth 2.0, SAML, JWT, and FIDO2/WebAuthn.
• Strong scripting proficiency in Python and PowerShell for automation and API integrations.
• Hands-on administration of Windows Server, VMware, and OpenShift/Kubernetes platforms.
• Experience with enterprise networking services including DNS, DHCP, TCP/IP, and firewalls.
• Proficiency with load balancers (F5, NGINX, HAProxy) and vulnerability management tools.
• Bachelor's degree in Computer Science, Engineering, or related field.
• Ability to lead troubleshooting, root-cause analysis, and technical documentation for complex identity issues.

Key Skills

Education

Bachelor's degree