IAM Single Sign On L3 Engineer

Blupace Hyderabad; Bengaluru; On-site; INR 1,200,000 - 1,500,000; Full time

Job summary

Blupace Hyderabad in Bengaluru is seeking an experienced IAM Architect to serve as the L3 escalation point for complex SSO, federation, and authentication issues. You will perform RCA and implement permanent solutions to recurring incidents.

Design, implement, and manage PingFederate and Microsoft Entra ID solutions, configure identity federation with SAML, OAuth, and OIDC, and mentor L1/L2 engineers while collaborating with security, DevOps, and architecture teams.

Qualifications

• Hands-on experience with PingFederate and SSO.
• Expertise in Microsoft Entra ID administration and configuration.
• Strong understanding of SAML 2.0, OAuth 2.0, and OpenID Connect protocols.
• Experience configuring identity federation, authentication policies, application registrations, and adapters.
• Knowledge of Conditional Access, MFA, PIM, RBAC, and identity security.
• Experience handling L3 escalations, complex troubleshooting, incident management, and RCA.
• Scripting and automation using PowerShell.
• Strong documentation and stakeholder management skills.

Responsibilities

• Act as the L3 escalation point for complex SSO, federation, and authentication issues.
• Perform RCA and implement permanent solutions to recurring incidents.
• Design, implement, and enhance PingFederate and Microsoft Entra ID solutions.
• Configure and manage identity federation using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Manage SP and IdP integrations, registrations, and PingFederate adapters.
• Automate routine administration, monitoring, and management tasks using PowerShell.

Skills

PingFederate

SSO

IAM

Microsoft Entra ID

SAML 2.0

OAuth 2.0

OIDC

MFA

PowerShell

RBAC

PIM

Tools

PingAccess

Entra Connect

Job description

Location : Bengaluru | WFO

What you'll do:

Act as the L3 escalation point for complex SSO, federation, and authentication issues.

Perform root cause analysis (RCA) and implement permanent solutions to recurring incidents.

Design, implement, and enhance enterprise-level PingFederate and Microsoft Entra ID solutions.

Configure and manage identity federation using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).

Manage Service Provider (SP) and Identity Provider (IdP) integrations, application registrations, and PingFederate adapters.

Implement and manage security controls, including Multi-Factor Authentication (MFA), Conditional Access, and Privileged Identity Management (PIM).

Automate routine administration, monitoring, and management tasks using PowerShell scripting.

Maintain technical documentation, architectural diagrams, SOPs, and knowledge base articles.

Collaborate with application owners, security teams, DevOps, and architecture teams to deliver secure IAM solutions.

Mentor L1/L2 support engineers and provide technical guidance on complex IAM issues.

Must-have skills:

Strong hands-on experience with PingFederate and Single Sign-On (SSO).

Expertise in Microsoft Entra ID (Azure AD) administration and configuration.

Strong understanding of SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) protocols.

Experience configuring identity federation, authentication policies, application registrations, and adapters.

Knowledge of Conditional Access, MFA, PIM, role-based access control (RBAC), and identity security.

Experience handling L3 escalations, complex troubleshooting, incident management, and RCA.

Scripting and automation experience using PowerShell.

Strong documentation, stakeholder management, and problem-solving skills.

Preferred skills:

Knowledge of PingAccess and other Ping Identity solutions.

Experience with Entra Connect synchronization, roles, and access management.

Experience designing highly available, scalable, and secure SSO solutions.

Exposure to enterprise IAM architecture, security compliance, and continuous service improvement.

Key Competencies:

• Identity & Access Management (IAM)
• Single Sign-On (SSO)
• PingFederate / Ping Identity
• Microsoft Entra ID (Azure AD)
• SAML 2.0 / OAuth 2.0 / OpenID Connect
• Federation & Authentication
• MFA / Conditional Access / PIM
• PowerShell Automation
• L3 Support / RCA / Incident Management
• IAM Solution Design & Integration