Identity Management Consultant

Harvey Nash; Dublin; On-site; EUR 90,000 - 130,000; Full time

Job summary

Harvey Nash is seeking a hands-on IAM engineering expert to design, implement and support complex authentication and authorization systems in both datacentre and cloud environments.

You will work across teams to refine requirements, deploy secure IAM architectures, and ensure alignment with regulatory and security standards. Strong Ping Federate/ Ping Access experience is essential for success.

Qualifications

• 7+ years of experience in Information Security, with a focus on IAM engineering.
• Deep hands-on experience with SSO technologies and protocols (OAuth, OpenID Connect, FIDO, SCIM, LDAP, SAML).
• Expertise in Cloud IAM solutions for AWS, GCP and Azure.

Responsibilities

• Contribute to story refinement and defining requirements.
• Work with solutions architects to integrate and control systems in deployment environments.
• Collaborate with development teams to deliver IAM requirements and data handling.
• Build and improve deployment pipelines to enable faster, data-informed decisions.
• Document deployment and maintenance procedures for IAM solutions.

Skills

IAM engineering

Information Security

RESTful Services

API design concepts

Linux

Windows

WebLogic

Tomcat

WebSphere

Tools

Ping Federate

Ping Access

SCIM

LDAP

SAML

OAuth

OpenID Connect

FIDO

Job description

This is a hands-on, deeply technical role where you will participate in the design, development and implementation of systems engineering activities, focused on IAM & SSO both datacentre & Cloud hosted, to include OS technical support, systems programming, and data centre capabilities. Responsible for components of complex engineering and/or analytical tasks and activities. Serves as a fully seasoned/proficient technical resource; provides tech knowledge and capabilities as team member and individual contributor to multiple projects across the business.

Typically, 5 or more years in a IAM engineering role

Deep experience in Ping Federate/Ping Access required.

Key Responsibilities

• Contribute to story refinement/defining requirements.
• Understand and utilize network, virtualization, and datacentre technologies for deployment strategies.
• Work with solutions & architects to integrate, transform and control systems in operational environments per the defined acceptance criteria.
• Work across development teams to understand and aid in the delivery of IAM requirements.
• Work with large, complex data sets that meet functional/ non-functional requirements.
• Build and improve processes supporting system transformation, structures, quality controls, dependency, and workload management.
• Define and build deployment pipelines that enable faster, better, data-informed decision-making within the business.
• Perform/Implement existing test suites (integration, regression, and performance), analyze test reports, identify any test issues/errors, and triage the underlying cause.
• Document and communicate required information for deployment, maintenance, support, and business functionality.
• Identify gaps in environment management standards adherence and work with appropriate partners to develop plans to close gaps.

Required Qualifications

• 7+ years of experience in Information Security
• Strong hands-on experience with industry standard SSO technologies and protocols (OAuth, OpenID Connect, FIDO, SCIM, LDAP, SAML)
• Detailed technical knowledge of how the protocols/systems function under the hood and not just at a UI level.
• Ability to discuss and troubleshoot protocols flows.
• Expertise in Identity and Authentication solutions such as Ping Federate/Ping Access
• Strong experience in designing Ping policies including custom solutions
• Strong expertise in development of Cloud IAM solutions for AWS, GCP and Azure
• Strong experience in federating cloud applications with PingFederate
• Strong experience in implementing identity synchronization to Cloud IAM using PingIDM/SCIM
• Knowledge of LDAP and Active Directory services, MFA, Risk based authentication and privileged access management
• Holistic view of IAM (Authentication and Authorization Data, Endpoint Security, Network Security, Policy Engine)
• Experience in Web-Development technologies: HTML, XML, XSL/XSLT, XPATH and Java script
• Proficient in Linux, Windows, Tomcat, Web Logic, IBM WebSphere environments
• Understanding of API design concepts, RESTful Services and modern application interaction patterns
• Familiarity with deployments and integration of IAM solutions within the cloud (Azure, AWS or Google Cloud)
• Experience in deploying large-scale, global projects and programs
• Familiarity with IT security and risk management practices