IAM Specialist - Federation Services

IAM Specialist - Federation Services 
Today’s world is fueled by vast amounts of information, which means that data is even more valuable than ever before. Protecting data and information systems is central to doing business, and therefore everyone in EY Information Security has an important role to play. Join a global team of almost 900 people who collaborate to support the business of EY by protecting EY and client information assets! Information Security professionals enable EY to work securely and deliver secure products and services, as well as detect and quickly respond when things go wrong. Together, the efforts of our dedicated team help protect the EY brand and build client trust. 

Within Information Security we blend risk strategy, digital identity, cyber defense, application security and technology service solutions as we consider the entire security lifecycle. You will join a team of hardworking, security-focused individuals dedicated to supporting, protecting and enabling the business through secure solutions and information systems. 

The opportunity 
Identity and Access Management (IAM) organization, a part of Information Security which, enables over 330,000 individuals across 140+ countries to access systems and information securely. As a member of the Identity and Access Management (IAM) team this position will contribute towards execution of an IAM roadmap that meets security requirements, including but not limited to security for, a complex Active Directory (AD) environment, hybrid cloud deployment, mobile computing, policy driven security, SSO, identity lifecycle management, and federation focusing on multiple protocols.

We offer opportunities to develop new skills and progress your career receiving support, coaching and feedback from colleagues around the world. This role will give you an opportunity to work with some of the best talent in the industry!

Your key responsibilities 

The IAM Specialist - Federation Services role maintains and supports EY’s production Web Access Management & Federation platforms. Responsibilities include providing level 3 support services for various Federation technologies, including Ping Federation Services, Azure, and other technologies. The team works with developers, EY client teams, Federation vendors, and at times with end users. You will work on projects guided by project managers while working with IAM architects, security consultants, and various other teams. All while demonstrating your knowledge to help facilitate changes and improve on current processes. We focus on following standards, policy, process, and documentation.

• Monitoring the health and maintaining infrastructure that are on both Linux and Windows servers 
• Responding to incidents generated by monitoring alerts, incidents and emails that have been escalated 
• Contribute to projects with a focus on ensuring production readiness 
• Validating that services are not interrupted after systems or configuration changes 
• Administrating PING Federation and supporting Single Sign-On (SSO) infrastructure, analyzing issue related to SSO and Multi-Factor Authentication (MFA) 
• A strong customer focus, with the ability to manage expectations appropriately, to deliver a superior customer experience and build long-term relationships.
• Build relationships across all operational support teams
• Follow support model for escalations to other operational support teams and vendors 

Skills and attributes for success 

• Deep understanding of authentication/authorization flows: SAML, OAuth2.0, OIDC, WS-Fed, and related terminologies 
• Deep understanding on Azure AD, Conditional Access, application administration, Role Based Access Control, and Azure B2B 
• Understanding application integrations for identify and access management and Multi-Factor Authentication (MFA)
• Knowledge on Microsoft Public Key Infrastructures Federated identity systems (Microsoft ADFS, PingFederate. Etc.) 
• Experience working on issues related to Federated Single Sign-on 
• Hands on experience with various tools: Fiddler, Chrome DevTools, Splunk, AppDynamics, etc. 
• Experience in PowerShell scripting, Java Script, Linux 
• Understanding of general IT networking topology i.e. DNS, load balance, proxy, reverse proxy, etc. 
• Maximize analytical and problem-solving skills to understand customer requirements to develop solutions to satisfy various business requirements 
• Partner with other global support teams to address issues while collaborating with colleagues in other regions and countries
• Flexibility to work in a 24*7 support structure 

To qualify for the role, you must have 

• Degree in Computer Science or related field or equivalent work experience 
• Minimum of 5 years’ experience in Information Systems in a related role, with tangible, relevant, and demonstrated operation experience with Identity Management Solutions 
• 3 years' of demonstrated experience with Ping Federate / CA Site Minder or similar products, including configuration and support; or with similar Web Access Management (WAM) solutions 

Certification Requirements: 

• Azure certification for implementing Microsoft Azure Infrastructure Solutions will be an added advantage. 

What we look for 

• Problem-solver with the ability to think creatively
• Deep understand of Federation logic
• Strong English verbal and written communication skills
• Ability to work independently as well as within a team 
• Ability to embrace change and adjust priorities or processes and approach as needed
• Highly self-motivated, directed, and can work independently without supervision in a high-pressure environment
   

What we offer 
As part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The EY benefits package goes above and beyond too, focusing on your physical, emotional, financial and social well-being. Your recruiter can talk to you about the benefits available in your country. Here’s a snapshot of what we offer: 

• Continuous learning: You will develop the mindset and skills to navigate whatever comes next. 
• Success as defined by you: We will provide the tools and flexibility, so you can make a significant impact, your way. 
• Transformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs. 
• Diverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs.