Customer IAM Engineer - SSO & Federation

Cerebra; Chennai; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Cerebra in Chennai is seeking a Customer IAM Engineer SSO & Federation to design and support authentication and access management solutions for enterprise applications.

You will configure policies, onboarding of apps via SAML/OIDC/OAuth and LDAP, and troubleshoot SSO, token, and certificate issues in a fast-paced environment.

Qualifications

• 3–7 years of hands-on IAM or customer authentication experience.
• Experience with on-prem IAM platforms like IVIA/ISVA, WebSEAL, Ping Identity.
• Strong knowledge of SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience with SSO, federation, LDAP, and Active Directory.
• Knowledge of JWTs, access tokens, ID tokens, TLS certificates, keystores, and truststores.
• Experience troubleshooting authentication flows, sessions, certificates, and application access.
• Working knowledge of Linux/Unix and basic scripting.
• Understanding of reverse proxies, session management, and high-availability deployments.

Responsibilities

• Implement and support customer authentication and access management solutions.
• Configure authentication policies, access policies, and reverse proxy integrations.
• Onboard applications using SAML, OAuth, OIDC, and LDAP.
• Troubleshoot SSO, federation, token, and certificate-related issues.
• Support platform upgrades, patching, and production incidents.
• Coordinate with application, infrastructure, network, and security teams.
• Maintain technical documentation and operational procedures.

Skills

IAM experience

SSO & federation

SAML 2.0 / OAuth 2.0 / OIDC

LDAP / Active Directory

JWT / tokens

Linux/Unix scripting

Troubleshooting auth flows

HA deployments

Tools

IVIA/ISVA

WebSEAL

Advanced Access Control

Ping Identity

Job description

Customer IAM Engineer SSO & Federation

Experience: 3 to 7 Years
Location: Chennai

Mandatory Skills

• Minimum 2 years of hands-on IAM or customer authentication experience.
• Experience with IBM Security Verify Access (IVIA/ISVA), WebSEAL, Advanced Access Control, Ping Identity, or a comparable on-premises IAM platform.
• Strong understanding of SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience with Single Sign-On (SSO), federation, LDAP, and Active Directory.
• Knowledge of JWT, access tokens, ID tokens, TLS certificates, keystores, and truststores.
• Experience troubleshooting authentication flows, sessions, certificates, and application access.
• Working knowledge of Linux/Unix and basic scripting.
• Understanding of reverse proxies, session management, and high-availability deployments.

Role Responsibilities

• Implement and support customer authentication and access management solutions.
• Configure authentication policies, access policies, and reverse proxy integrations.
• Onboard applications using SAML, OAuth, OIDC, and LDAP.
• Troubleshoot SSO, federation, token, and certificate-related issues.
• Support platform upgrades, patching, and production incidents.
• Coordinate with application, infrastructure, network, and security teams.
• Maintain technical documentation and operational procedures.