Senior Access Management Engineer – Hybrid, MFA & Zero Trust

S&P Global Mobility; London; Híbrido; CAD 146.000 - 218.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Competitive pay

Benefits package

Retirement plan

Descripción de la vacante

S&P Global Mobility is seeking an experienced Identity and Access Engineer to design, operate, and secure SSO across enterprise and SaaS apps. You’ll own MFA strategy and implement phishing-resistant methods, plus craft risk-based conditional access policies.

This hybrid role covers workforce and customer identity flows, secure onboarding, and policy documentation. Applicants must be authorized to work in Canada. Salary is anticipated between $104,000 and $156,000 USD per year.

Formación

• 6+ years in access management, identity, or authentication engineering.
• Deep expertise with at least one access management platform (Okta, Entra ID, Ping Identity, ForgeRock).
• Federation and protocol mastery of SAML, OIDC, and OAuth 2.0.
• MFA and conditional access design and operational experience.

Responsabilidades

• Design, operate, and secure SSO across enterprise and SaaS applications.
• Own MFA strategy and rollout, advancing phishing-resistant authentication methods.
• Design and tune risk-based conditional access and authorization policies.
• Manage workforce and customer identity authentication flows.
• Lead secure onboarding of applications to the access platform with least-privilege defaults.
• Define authentication assurance levels and document policy changes.
• Serve as a backup owner for an adjacent domain to eliminate single points of failure.
• Ensure access outputs, including authentication logs, policy configurations, and access decisions, feed audit and resilience evidence.

Conocimientos

Access Management

Identity Engineering

Authentication Engineering

SAML

OIDC

OAuth 2.0

MFA

Conditional Access

Herramientas

Okta

Microsoft Entra ID

Ping Identity

ForgeRock

Descripción del empleo

S&P Global Mobility is seeking an experienced Identity and Access Engineer to design, operate, and secure SSO across enterprise and SaaS apps. You’ll own MFA strategy and implement phishing-resistant methods, plus craft risk-based conditional access policies.

This hybrid role covers workforce and customer identity flows, secure onboarding, and policy documentation. Applicants must be authorized to work in Canada. Salary is anticipated between $104,000 and $156,000 USD per year.