Hybrid Senior Access Engineer | SSO, MFA, Zero Trust

Mobility Global Inc.; London; Híbrido; CAD 104.000 - 156.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Benefits package

Incentive opportunities

Hybrid work arrangement

Descripción de la vacante

Mobility Global is seeking a Senior Access Management Engineer to design, operate, and secure SSO and federation across enterprise and SaaS applications. You will own MFA strategy and drive phishing-resistant authentication, while shaping policy for access control and token troubleshooting.

You will lead onboarding of applications to the access platform, define authentication assurance levels, and ensure audit-ready access artifacts.

Formación

• 6+ years in access management or authentication engineering.
• Experience with at least one identity platform (Okta, Entra ID, Ping, ForgeRock).
• Strong knowledge of SAML, OIDC, OAuth 2.0.
• Design and operate MFA and phishing-resistant methods.
• Translate security requirements into policies and troubleshoot tokens.

Responsabilidades

• Design, operate, and secure SSO and federation across enterprise apps.
• Own MFA strategy and rollout toward phishing-resistant methods.
• Design and tune conditional access and authorization policies.
• Manage workforce identity and customer identity authentication flows.
• Lead secure onboarding of applications to the access platform.
• Define authentication assurance levels and document policy changes.
• Ensure access outputs feed audit and resilience evidence.

Conocimientos

Federation protocols

MFA design

Conditional access

Policy design

Authentication flows

Herramientas

Okta

Microsoft Entra ID

Ping Identity

ForgeRock

Descripción del empleo

Mobility Global is seeking a Senior Access Management Engineer to design, operate, and secure SSO and federation across enterprise and SaaS applications. You will own MFA strategy and drive phishing-resistant authentication, while shaping policy for access control and token troubleshooting.

You will lead onboarding of applications to the access platform, define authentication assurance levels, and ensure audit-ready access artifacts.