GMS-Senior-SSO-CIAM-Airlock

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

Cyber Managed Services – Identity and access Management – Airlock SSO/CIAM Senior

We are seeking an experienced and knowledgeable Senior Consultant for Airlock SSO/CIAM or similar product to join our operations team. The ideal candidate will have a strong background in identity and access management, with extensive experience in managing and optimizing Airlock SSO and CIAM solutions. This role will involve leading operational initiatives, provide expert guidance, and ensuring the security and efficiency of our SSO environment.

Key Responsibilities

• Provide expert L2 and L3 support for Airlock SSO/CIAM-related issues, including troubleshooting complex user access problems, application integration challenges, and system outages.
• Configure and troubleshoot access issues, MFA methods, risk-based authentication rules, and user-profile issues.
• Diagnose complex authentication failures, service degradation, and system outages.
• Perform technical and change-impact analysis for platform, policy, and application changes.
• Maintain installation, configuration, deployment, patching, upgrades, and post-change validation.
• Maintain incident remediation, root-cause, prevention, and operational documentation.
• Monitor platform, directory infrastructure, backups, and integrations for potential issues.
• Develop and maintain SSO policy documentation, user guides, and training materials to support end-users and promote best practices across the organization.
• Conduct regular security reviews and audits of Entra SSO configurations to ensure alignment with industry standards and compliance requirements and recommend improvements as necessary.
• Coordinate with technical teams, security leads, stakeholders, and product vendors.
• Provide technical guidance to junior team members and contribute to knowledge-management activities.
• Produce service-level reports, performance metrics, and recommendations for service improvement.
• Ensure adherence to SLAs, ITIL processes, change controls, and documentation standards.

Qualifications

• Bachelor’s degree in a related field, or equivalent practical experience.
• 4–8 years of overall Identity and Access Management experience, including strong hands-on experience with Airlock Access Management or similar.

Required Skills and Expertise

• Advanced experience in Airlock SSO operations, configuration and troubleshooting,
• Strong knowledge of federation and authorization protocols, including SAML, OAuth 2.0, and OpenID Connect.
• Experience with one or more enterprise Access Management products such as Airlock, Okta, PingFederate, Microsoft Entra ID, PingID, Azure MFA, or RSA.
• Ability to manage authentication policies, selectors, sessions, identity profiles, protocol endpoints, OAuth scopes, client registration policies, grant mappings, token mappings, and OIDC policies.
• Experience with application onboarding, IdP configuration, patch/version upgrades, and production rollout.
• Good knowledge of authentication, authorization, provisioning, IAM, and core security concepts.
• Working knowledge of Windows, Linux, or Unix operating-system internals and monitoring tools.
• Experience in ITIL-based service management and supporting sglobal or remote teams.
• Strong verbal and written communication, stakeholder management, and technical documentation skills.

Preferred Certifications

• ITIL or equivalent certification is preferred.
• CIAM, Microsoft Azure, or AWS certification or similar sssssis an advantage.

Work Requirements

• Willingness to work in shifts and provide on-call support as required.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.