Identity Engineer – Authentication and Access Integration

The Elite Job; Dubai; Hybrid; AED 180,000 - 240,000; Full time

Benefits offered by this job

Competitive Compensation

Flexible work options: remote orhybrid

Certification support

Career advancement opportunities

Job summary

The Elite Job is seeking an Identity Engineer – Authentication and Access Integration to design, implement, and optimize identity management across enterprise apps, cloud platforms, and corporate systems.

This role concentrates on integrating identity providers, SSO, MFA, and identity federation within complex environments. You will collaborate with cybersecurity, infrastructure, and IT teams to deliver secure access while reducing identity risks.

Qualifications

• Strong understanding of IAM, authentication, authorization, and federation concepts.
• Proficient with SAML 2.0, OAuth 2.0, OIDC and related workflows.
• Experience implementing SSO, MFA, and conditional access policies.
• Familiarity with enterprise directory services and cloud identity environments.
• Ability to analyze logs, troubleshoot protocol issues, and conduct root-cause analyses.

Responsibilities

• Design and implement authentication integrations across applications, cloud platforms, and external services.
• Configure and maintain SSO solutions for secure access across multiple apps.
• Implement MFA, passwordless, adaptive authentication and risk-based access controls.
• Integrate applications using SAML, OAuth, and OIDC.
• Support identity lifecycle and RBAC/ABAC policies.
• Collaborate with security, cloud, and development teams; produce technical docs and SOPs.

Skills

IAM concepts

SAML 2.0

OAuth 2.0

OIDC

SSO

MFA

RBAC

ABAC

Active Directory

Entra ID

LDAP

Token handling

REST/JSON/HTTP

Azure/AWS/GCP

Zero trust

Security logging

Education

Bachelor's degree in CS/IT/Cybersecurity or related field

Tools

Microsoft Entra ID

Okta

Ping Identity

Job description

1. Job Summary

The Elite Job is seeking a skilled and security-focused Identity Engineer – Authentication and Access Integration to design, implement, maintain, and optimize identity management and authentication solutions across enterprise applications, cloud platforms, and corporate systems. The successful candidate will play a key role in ensuring secure, seamless, and reliable access to digital resources for employees, customers, partners, and third‑party users.

This role focuses on integrating identity providers, authentication services, single sign‑on (SSO), multi‑factor authentication (MFA), and identity federation technologies into complex enterprise environments. The Identity Engineer will collaborate with cybersecurity, infrastructure, application development, IT operations, and compliance teams to deliver secure access experiences while reducing identity‑related risks.

The ideal candidate will have a strong understanding of identity and access management principles, modern authentication protocols, directory services, access policies, and cloud‑based identity platforms. They should be comfortable troubleshooting authentication issues, developing integration solutions, automating identity workflows, and implementing security best practices.

At The Elite Job, the Identity Engineer will contribute to strengthening organizational security, improving user experience, supporting digital transformation, and ensuring that access to sensitive systems is granted appropriately and efficiently.

2. Key Responsibilities

Authentication and Identity Integration

• Design, develop, and implement authentication integrations between enterprise applications, identity providers, cloud platforms, and external services.
• Configure and maintain Single Sign‑On (SSO) solutions to provide secure and convenient access across multiple applications.
• Implement and manage Multi‑Factor Authentication (MFA), passwordless authentication, adaptive authentication, and risk‑based access controls where appropriate.
• Integrate applications using modern authentication and authorization protocols, including SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Support identity federation between internal systems, cloud environments, business partners, and third‑party applications.
• Ensure authentication integrations follow established security standards, architecture guidelines, and organizational policies.

Identity and Access Management

• Configure and maintain identity providers, directories, authentication policies, and access management platforms.
• Support user identity lifecycle processes, including account provisioning, access modifications, account suspension, and deprovisioning.
• Integrate identity management solutions with enterprise directories such as Microsoft Active Directory and Microsoft Entra ID.
• Implement role‑based access control (RBAC) and attribute‑based access control (ABAC), where appropriate, to support least‑privilege access.
• Assist with privileged access management integrations and secure authentication for administrative accounts.
• Collaborate with application owners to define access requirements, authentication flows, and appropriate authorization rules.

Security Engineering and Risk Management

• Identify and resolve authentication weaknesses, access configuration errors, and identity‑related security vulnerabilities.
• Apply security best practices for token handling, session management, credential protection, certificate management, and secure API access.
• Review identity configurations and access policies to identify excessive permissions, inconsistent controls, and potential security gaps.
• Support identity‑related security assessments, internal audits, vulnerability remediation, and compliance activities.
• Investigate suspicious authentication events and collaborate with security operations teams on identity‑related incidents.
• Maintain secure configurations for authentication integrations and help ensure alignment with applicable security frameworks and regulatory requirements.

Troubleshooting and Technical Support

• Diagnose and resolve complex SSO failures, MFA issues, federation errors, token validation problems, and directory synchronization issues.
• Analyze authentication logs, application responses, protocol exchanges, and configuration settings to identify root causes.
• Work with application developers, infrastructure engineers, vendors, and support teams to resolve integration challenges.
• Monitor identity services for availability, performance, reliability, and unusual authentication activity.
• Develop technical documentation, troubleshooting guides, and standard operating procedures for identity integrations.
• Participate in incident response, service restoration, and root‑cause analysis activities as required.

Automation and Continuous Improvement

• Develop scripts and automation workflows to simplify identity integration, configuration management, testing, and operational support.
• Use scripting languages such as PowerShell, Python, or Bash to improve efficiency and reduce manual tasks.
• Support identity provisioning and deprovisioning automation through approved APIs and identity management tools.
• Evaluate new identity technologies, authentication capabilities, and security improvements.
• Contribute to the development of reusable integration templates, technical standards, and deployment procedures.
• Identify opportunities to improve user experience without compromising security or compliance requirements.

Collaboration and Documentation

• Collaborate with cybersecurity, cloud engineering, enterprise architecture, application development, and IT support teams.
• Participate in technical design reviews, project planning, implementation meetings, and change management activities.
• Communicate technical findings, implementation risks, and recommended solutions to technical and non‑technical stakeholders.
• Maintain accurate records of identity configurations, application integrations, access policies, and system dependencies.
• Provide technical guidance to colleagues and support knowledge‑sharing initiatives across the organization.

3. Required Skills and Qualifications

Educational Qualifications

• Bachelors degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, Computer Engineering, or a related technical discipline.
• Equivalent professional experience and relevant technical certifications may be considered.
• Additional training in identity and access management, cloud security, enterprise authentication, or information security is an advantage.

Technical Skills

• Strong understanding of identity and access management (IAM), authentication, authorization, and identity federation concepts.
• Practical knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and related authentication workflows.
• Experience implementing or supporting Single Sign‑On (SSO), Multi‑Factor Authentication (MFA), and conditional access policies.
• Familiarity with identity providers and platforms such as Microsoft Entra ID, Okta, Ping Identity, or comparable enterprise IAM solutions.
• Knowledge of Active Directory, LDAP, directory synchronization, identity attributes, groups, and access policies.
• Understanding of access tokens, ID tokens, refresh tokens, claims, scopes, certificates, signing keys, and secure session management.
• Familiarity with REST APIs, JSON, HTTP, TLS, and application integration patterns.
• Experience with cloud environments such as Microsoft Azure, Amazon Web Services (AWS), or Google Cloud Platform (GCP).
• Knowledge of security principles such as least privilege, defense in depth, zero trust, and secure‑by‑design architecture.
• Ability to analyze authentication logs, troubleshoot protocol‑level issues, and conduct structured root‑cause analysis.

Preferred Technical Skills

• Experience with identity lifecycle management, automated provisioning, and deprovisioning.
• Familiarity with SCIM (System for Cross‑domain Identity Management) and automated user provisioning.
• Knowledge of privileged access management (PAM), secrets management, and service account security.
• Experience with PowerShell, Python, Bash, or similar scripting tools.
• Familiarity with CI/CD pipelines, infrastructure as code, version control, and configuration management.
• Understanding of security monitoring tools, SIEM platforms, audit logging, and identity threat detection.
• Knowledge of relevant security standards and frameworks, such as ISO 27001, NIST guidance, and applicable privacy requirements.

4. Experience

• Preferred experience: 3–6 years in identity engineering, IAM administration, authentication integration, cybersecurity engineering, or a related technical role.
• Demonstrated experience integrating enterprise or cloud applications with identity providers.
• Practical experience configuring and troubleshooting SSO, MFA, identity federation, and authentication policies.
• Experience supporting application onboarding, authentication testing, and secure identity configuration changes.
• Familiarity with enterprise directory services and cloud identity environments.
• Experience investigating authentication failures, resolving access issues, and documenting technical solutions.
• Previous involvement in security improvement projects, identity modernization, cloud migration, or zero‑trust initiatives is beneficial.
• Candidates with strong foundational knowledge, relevant certifications, and hands‑on project experience may also be considered for junior‑level opportunities, depending on business needs.

5. Working Hours

Employment Type: Full‑time.

Standard Schedule: Typically 40 hours per week, subject to the employment agreement and applicable local employment laws.

Working Days: Monday to Friday for standard business operations, unless otherwise specified.

Work Arrangement: Remote, hybrid, or on‑site, depending on the assigned team and organizational requirements.

Flexibility: Flexible scheduling may be available where supported by team operations and business priorities.

Collaboration: The role may require participation in meetings across different time zones when supporting international teams.

Maintenance and Incident Support: Occasional planned maintenance activities or urgent incident support may be required, subject to agreed on‑call arrangements.

Availability: Candidates should be able to coordinate with relevant stakeholders during agreed working hours and respond to critical identity‑related issues according to established service procedures.

Specific working hours, shift arrangements, and on‑call expectations will be communicated during the recruitment process.

6. Knowledge, Skills, and Abilities

Technical Knowledge

• Strong understanding of authentication architecture, identity federation, authorization models, and enterprise access management.
• Ability to evaluate identity integration requirements and translate them into secure technical solutions.
• Knowledge of common authentication vulnerabilities, secure session handling, token validation, and certificate‑based trust.
• Understanding of cloud identity services, application security, directory integration, and identity governance principles.
• Awareness of security monitoring, incident response, access reviews, and audit requirements.

Analytical and Problem‑Solving Skills

• Ability to investigate complex authentication and authorization issues using a structured troubleshooting approach.
• Strong diagnostic skills when analyzing logs, application errors, protocol responses, and identity configurations.
• Ability to identify root causes, assess security implications, and recommend practical remediation measures.
• Capacity to evaluate alternative technical approaches and balance security, usability, scalability, and operational requirements.

Communication and Collaboration

• Excellent written and verbal communication skills.
• Ability to explain identity and authentication concepts clearly to technical teams and business stakeholders.
• Strong interpersonal skills and the ability to collaborate across multidisciplinary teams.
• Ability to document technical procedures, integration requirements, implementation decisions, and troubleshooting outcomes.
• Willingness to share knowledge and contribute to team development.

Professional Abilities

• High attention to detail when handling security configurations and access permissions.
• Strong commitment to confidentiality, data protection, and responsible access management.
• Ability to manage multiple tasks, prioritize incidents, and meet project deadlines.
• Adaptability when working with changing technologies, security requirements, and enterprise systems.
• A proactive approach to learning, process improvement, and emerging identity security practices.
• Professional integrity and sound judgment when working with privileged access and sensitive organizational information.

7. Benefits

The Elite Job aims to provide a professional working environment that supports employee development, performance, and long‑term career growth. Depending on the employment arrangement and applicable company policies, benefits may include:

• Competitive Compensation: Salary based on experience, technical expertise, role responsibilities, and market conditions.
• Flexible Work Options: Remote or hybrid working opportunities where available for the position.
• Professional Development: Opportunities to strengthen expertise in IAM, cloud security, authentication engineering, and enterprise cybersecurity.
• Certification Support: Potential access to approved training programs and relevant professional certification resources.
• Career Advancement: Opportunities to progress into senior identity engineering, IAM architecture, cloud security, or cybersecurity leadership roles.
• Collaborative Environment: Opportunities to work with cross‑functional teams on identity modernization and enterprise security initiatives.
• Technology Exposure: Experience with modern identity platforms, authentication protocols, cloud services, and security automation tools.
• Performance Recognition: Potential recognition for contributions to security improvements, operational reliability, and successful project delivery.
• Employee Well‑Being: Access to applicable leave policies, work‑life balance initiatives, and other employment benefits according to company policy.
• Actual compensation, benefits, certification funding, and work arrangements will be confirmed by the employer during the hiring process.

8. Why Join The Elite Job?

Joining The Elite Job as an Identity Engineer – Authentication and Access Integration offers an opportunity to contribute to the systems that protect enterprise applications, digital identities, and sensitive business information.

This role is well suited to professionals who want to deepen their expertise in identity security while working on practical engineering challenges involving authentication, federation, cloud access, and secure application integration.

As part of the team, you may have the opportunity to:

• Make a Security Impact: Help protect business systems by implementing reliable authentication and access controls.
• Work with Modern Technologies: Develop experience with enterprise IAM platforms, cloud identity providers, and industry‑standard authentication protocols.
• Solve Challenging Problems: Investigate complex integration issues and develop scalable, maintainable technical solutions.
• Support Digital Transformation: Enable secure access to applications and services across increasingly connected enterprise environments.
• Develop Your Career: Build a strong foundation for future opportunities in identity architecture, cloud security, security engineering, and IAM leadership.
• Collaborate Across Teams: Work with professionals from cybersecurity, software development, cloud engineering, and IT operations.
• Promote Continuous Improvement: Contribute ideas and automation that improve security, efficiency, reliability, and user experience.

The position offers a meaningful opportunity for an identity security professional who values technical excellence, secure engineering practices, and continuous learning.