GMS-Senior-SSO-MFA

Ernst & Young Advisory Services Sdn Bhd; Bengaluru; On-site; INR 2,500,000 - 4,200,000; Full time

Job summary

EY in Bengaluru is seeking a Senior Consultant for SSO and Access Management to deliver operational support, onboarding, and platform optimization across Okta, PingFederate, Ping One and Azure AD.

You will work with security, governance and IAM teams, perform RCA, manage incidents, and contribute to automation while supporting global operations through rotations and on-call as needed.

Qualifications

• Experience in identity and access management platforms (Okta, PingFederate, Azure AD).
• Knowledge of SSO, MFA, directory services and cloud identity management.
• Experience with RBAC and access governance processes.

Responsibilities

• Administer and support enterprise SSO and Access Management platforms.
• Provide L2/L3 operational support for authentication, authorization, federation, MFA, and access issues.
• Monitor platform health, security events, and proactively resolve issues.
• Lead onboarding of enterprise applications to SSO platforms.

Skills

Identity & Access Management

SSO technologies

Okta

PingFederate

Azure AD / Microsoft Entra ID

Education

Bachelor's degree in Computer Science / IT / Cybersecurity / Engineering

Tools

Okta

PingFederate

Ping One

Azure AD / Entra ID

Job description

At EY, you'll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we're counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

GDS - IAM MS SSO- Senior

Job Summary

The SSO & Access Management Senior Consultant is responsible for providing operational support, administration, and continuous improvement of enterprise Single Sign-On (SSO) and Access Management platforms. This role supports global IAM operations through monitoring, troubleshooting, incident resolution, application onboarding, access governance, and platform optimization activities.

The consultant will work across industry-leading SSO technologies such as Okta, PingFederate, Ping One, Microsoft Entra ID (Azure AD), and related authentication and federation solutions, while ensuring adherence to security, compliance, and service management standards.

Key Responsibilities

• Administer and support enterprise SSO and Access Management platforms including Okta, PingFederate, Ping One, Microsoft Entra ID (Azure AD), and similar technologies.
• Provide L2/L3 operational support for authentication, authorization, federation, SSO, MFA, and access-related issues.
• Monitor platform health, availability, integrations, and security events to proactively identify and resolve issues.
• Manage incident, service request, problem, and change management activities in accordance with ITIL processes and SLAs.
• Perform root cause analysis (RCA) and implement corrective and preventive actions for recurring issues.
• Support user lifecycle management activities, including provisioning, de-provisioning, access modifications, and entitlement management.
• Lead and support onboarding of enterprise applications to SSO platforms.
• Configure and troubleshoot SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation integrations.
• Coordinate with application owners, infrastructure teams, and business stakeholders during onboarding and enhancement activities.
• Manage certificates, metadata updates, federation configurations, and authentication policies.
• Support periodic access reviews, certification campaigns, and audit activities.
• Ensure compliance with organizational security standards, compliance requirements, and IAM best practices.
• Assist in implementation and maintenance of Role-Based Access Control (RBAC) and access governance processes.
• Maintain operational and technical documentation, SOPs, runbooks, and knowledge articles.
• Drive continuous service improvement initiatives to enhance platform stability, user experience, and operational efficiency.
• Identify automation opportunities for repetitive operational tasks and reporting.
• Provide recommendations for improving authentication and access management processes.
• Collaborate closely with business application owners, security teams, infrastructure teams, and IAM stakeholders.
• Provide technical guidance and mentoring to junior analysts and team members.
• Participate in governance meetings, operational reviews, and client/service management discussions.
• Prepare operational reports, dashboards, KPI metrics, SLA performance reports, and management updates.

Preferred Skills

• 3-6 years of experience in identity and access management, with a strong focus on Okta/Ping Federate or similar IAM platforms.
• In-depth knowledge of IAM principles, SSO, MFA, directory services, and cloud identity management.
• Proven track record of managing complex user provisioning and de-provisioning scenarios.
• Familiarity with IT security standards and compliance frameworks (e.g., SOX, HIPAA, GDPR).
• Excellent analytical, problem-solving, and project management skills.
• Strong leadership abilities and experience mentoring junior staff.
• Effective communication and interpersonal skills, with the ability to interact with various stakeholders.
• Relevant certifications (e.g., Okta Certified Administrator, Okta Certified Consultant, Okta Certified Professional) are highly desirable

Education

• Bachelor's degree in computer science, Information Technology, Cybersecurity, Engineering, or a related field.

Work Requirements

• Willingness to work in rotational shifts supporting global operations.
• Willingness to participate in on-call support rotations.
• Ability to support critical production incidents outside standard business hours when required.
• Willingness to travel occasionally based on business requirements.
• Ability to work effectively within a Managed Services delivery model.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.

Select how often (in days) to receive an alert:

EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.