Lead, IAM Federation and Infra Analyst

Schneider Electric North America; Barcelona; Híbrido; EUR 45.000 - 65.000; Jornada completa

Descripción de la vacante

A leading global energy management company in Barcelona is looking for an Identity and Access Management (IAM) Support Analyst to ensure the security of digital assets. This role involves providing advanced support for authentication systems, managing SSO integrations, and collaborating with various teams to improve IAM operations. Candidates should have over 5 years of experience supporting IAM platforms like PingFederate, along with strong problem-solving skills. A flexible work schedule and hybrid options are available.

Servicios

Flexible schedule

Hybrid work plan

Holy Pack – additional vacation days

Floating Holidays

Global Family Leave Policy

Health and wellness platform

On-site medical service

Open Talent Market

Shareholder program

Recognition program

Life insurance

Flexible Remuneration Plan

Club Schneider discounts

Company-subsidized volunteer programs

Formación

• 5+ years of experience supporting IAM platforms, specifically PingFederate/Ping Access.
• Strong knowledge of authentication protocols (SAML 2.0, OAuth2, OIDC).
• Familiarity with TLS/SSL and identity tokens (JWT, SAML assertions).

Responsabilidades

• Provide Level 2 and Level 3 support for Ping Identity products.
• Investigate and resolve authentication failures and federation errors.
• Configure and support SSO integrations with enterprise applications.
• Manage SSL/TLS certificates across Ping environments.

Conocimientos

Authentication protocols (SAML 2.0, OAuth2, OIDC)

Problem-solving skills

Scripting and debugging (PowerShell, Bash, Python)

Communication and interpersonal skills

Educación

Bachelor’s or master’s degree in computer science or related field

Herramientas

PingFederate

ServiceNow

Descripción del empleo

About Schneider Electric

Schneider Electric is the global specialist in energy management and automation. With revenues of ~€27 billion, our 135,000+ employees serve customers in over 100 countries, helping them to manage their energy and processes in ways that are safe, reliable, efficient, and sustainable. From the simplest of switches to complex operational systems, our technology, software, and services improve the way our customers manage and automate their operations. Our connected technologies reshape industries, transform cities, and enrich lives. At Schneider Electric we call this Life Is On.

About Schneider Digital

All IT needs for SE are managed by a group called Schneider Digital (SD), spread across 303 locations in 60 countries with over 2,300 staff, along with various engagements with all major global IT service providers.

Role Mission

As an Identity and Access Management (IAM) Support Analyst, your role is crucial in ensuring the security and integrity of our organization’s digital assets. You will own the technical platform for core Identity platforms, including identity governance and authentication, manage service levels, operations KPIs, audit remediation actions, and continuous improvements. You will be a key technical point of contact for resolving authentication and single‑sign‑on (SSO) issues and ensuring availability of critical IAM infrastructure.

Main Responsibilities

• Provide Level 2 and Level 3 support for Ping Identity products (PingFederate, Ping Access, PingID), resolving advanced technical issues related to authentication, SSO, and multi‑factor authentication.
• Investigate and resolve authentication failures, federation errors, and SSO integration challenges using log analysis, trace tools, and protocol‑level debugging of SAML, OAuth, and OIDC flows.
• Ensure high availability and optimal performance of identity services through proactive monitoring, health checks, and alert mechanisms across all Ping Identity components.
• Configure and support SSO integrations with enterprise and cloud applications, implementing secure protocols and coordinating metadata exchange with internal and third‑party providers.
• Manage SSL/TLS certificates across Ping environments, including timely renewals, keystore management, and enforcing secure communication practices.
• Collaborate with security, infrastructure, and application teams to triage incidents, implement fixes, and align IAM services with security standards and compliance requirements.
• Support version upgrades, patches, and environment migrations, planning, testing, and executing changes in development, QA, and production environments.
• Develop and maintain technical documentation and knowledge‑base articles outlining common issues, solutions, integration procedures, and operational best practices.
• Respond to and manage IAM‑related support tickets, ensuring timely resolution, customer communication, and proper categorization of incidents and service requests.
• Lead or assist with onboarding new applications to the Ping Identity platform, handling end‑to‑end configuration, attribute mapping, and user testing for SAML/OIDC setups.
• Guide application teams through integration procedures, following standard operating protocols and ensuring consistent implementation of IAM policies across systems.
• Participate in maintenance and on‑call support rotations, responding to critical incidents and performing scheduled upgrades or deployments outside business hours.
• Continuously identify opportunities to improve IAM support operations, including automating repetitive tasks, enhancing monitoring, and streamlining incident response workflows.

Skills and Experience

• Bachelor’s or master’s degree in computer science, information technology, or a related field.
• 5+ years of experience supporting IAM platforms, specifically PingFederate/Ping Access or related technologies.
• Strong knowledge of authentication protocols (SAML 2.0, OAuth2, OIDC).
• Familiarity with TLS/SSL, federation concepts, and identity tokens (JWT, SAML assertions).
• Experience integrating Ping with cloud applications such as Workday, Salesforce, ServiceNow, and others.
• Understanding of Zero‑Trust principles and managing infrastructure in AWS, Azure, or GCP.
• Proficiency in scripting and debugging (PowerShell, Bash, Python preferred).
• Strong problem‑solving skills and ability to make decisions in a fast‑paced environment.
• Strong communication and interpersonal skills with the ability to collaborate effectively with users, professionals, and IT teams.

Desired / Preferred

• Working knowledge of federation solutions such as Ping, Okta, or related technologies.
• Understanding of IAM concepts and authentication flows.
• Great troubleshooting and problem‑solving skills.
• Experience with ticketing tools (e.g., ServiceNow).

What Will You Get?

• Flexible schedule that allows you to adjust work hours.
• Hybrid work plan enabling you to work from home.
• Holy Pack – additional vacation days you can purchase.
• Floating Holidays – exchange holidays for other days that suit your plans.
• Sabbatical Pack – request up to 2 months of extra unpaid leave.
• Global Family Leave Policy – flexible paid conditions for parenthood, loss, or caregiving.
• Health and wellness platform Wellwo – access to wellness content, nutrition counseling, fitness classes, and more for you and up to five people of your choice.
• Wellhub network – access to thousands of gyms and sports centers.
• On‑site medical service for close attention to any medical needs.
• Open Talent Market – AI‑driven professional development platform to connect with job opportunities, projects, and mentors globally.
• Shareholder program – opportunity to become a shareholder of Schneider Electric.
• Recognition program – give and receive points for achievements and redeem them for gift cards.
• Life insurance for your protection.
• Flexible Remuneration Plan – choose from health insurance, meal vouchers, childcare vouchers, transportation vouchers, training, and more.
• Club Schneider – special discounts at stores, restaurants, travel agencies, and other external services.
• Company‑subsidized volunteer programs to contribute to community and environment.

Apply Today

Let us learn about you! Apply today.

You must submit an online application to be considered for any position with us. This position will be posted until filled.

DIGINFR24

Equal Opportunity Employer

Schneider Electric is an Equal Opportunity Employer. It is our policy to provide equal employment and advancement opportunities in the areas of recruiting, hiring, training, transferring, and promoting all qualified individuals regardless of race, religion, color, gender, disability, national origin, ancestry, age, military status, sexual orientation, marital status, or any other legally protected characteristic or conduct.

At Schneider Electric we uphold the highest standards of ethics and compliance. Our Trust Charter is our Code of Conduct and demonstrates our commitment to ethics, safety, sustainability, quality and cybersecurity. You can find out more about our Trust Charter here.