Senior SSO & IAM Engineer

Ampstek; Sydney; On-site; AUD 120,000 - 180,000; Full time

Job summary

Ampstek is seeking an experienced SSO Engineer to design, implement, administer, and support enterprise IAM and authentication solutions across our IT landscape. You will focus on SSO, federation, MFA, OAuth/OIDC, and integration of applications with identity providers such as Azure AD and Okta, collaborating with security and cloud teams.

Responsibilities include configuring SSO and IAM, managing certificates, provisioning users via SCIM, troubleshooting failures, and developing architecture

Qualifications

• Strong experience in SSO and Identity & Access Management.
• Hands-on with SAML 2.0.
• Experience with OAuth 2.0 and OpenID Connect.
• Experience with Azure Entra ID (Azure AD) and/or Okta.
• Strong knowledge of MFA and Conditional Access.
• Experience with SCIM / automated user provisioning.

Responsibilities

• Design, implement, configure, and support enterprise SSO and IAM solutions.
• Integrate applications with identity providers using SAML 2.0, OAuth 2.0 and OpenID Connect (OIDC).
• Configure and manage identity providers such as Microsoft Entra ID (Azure AD), Okta, Ping Identity, or equivalent platforms.
• Implement and support Multi-Factor Authentication (MFA) and Conditional Access policies.
• Configure application federation and troubleshoot authentication and authorization issues.
• Manage enterprise application onboarding to SSO platforms.
• Configure authentication flows, claims, assertions, certificates, and token-based authentication.
• Support user provisioning and de-provisioning using SCIM and other automated provisioning mechanisms.
• Integrate applications with Active Directory and cloud identity services.
• Troubleshoot SSO, federation, authentication failures.

Skills

SSO & IAM

SAML 2.0

OIDC/OAuth 2.0

Azure AD / Entra ID

Okta

MFA & Conditional Access

SCIM

REST APIs

Job description

Ampstek is seeking an experienced SSO Engineer to design, implement, administer, and support enterprise IAM and authentication solutions across our IT landscape. You will focus on SSO, federation, MFA, OAuth/OIDC, and integration of applications with identity providers such as Azure AD and Okta, collaborating with security and cloud teams.

Responsibilities include configuring SSO and IAM, managing certificates, provisioning users via SCIM, troubleshooting failures, and developing architecture