Senior Identity Services Engineer

Epsilon Data Management; Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Epsilon Data Management is seeking a skilled Identity Services engineer with 3+ years of SSO experience to design and manage end-to-end access for employees and applications. You will work across cloud providers, automate identity lifecycles, and improve security and user experience.

You will contribute to integrating SSO across complex systems, using protocols like SAML and OIDC, and scripting automation with Python.

Qualifications

• 3+ years Single Sign-On expertise with Okta, Auth0, Ping, or Azure Entra.
• Deep understanding of SAML, OIDC, and OAuth 2.0 protocols.
• 3+ years identity lifecycle automation experience (e.g., SailPoint).
• Experience administering directory services such as Windows and Azure AD.

Responsibilities

• Lead design, development, and implementation of SSO services and Identity Lifecycle software.
• Assess, triage, and resolve degraded SSO services.
• Develop scripts that provision SSO integrations and automate patterns.
• Evaluate risk and make improvement recommendations based on access levels.
• Integrate applications into SSO using SAML, OIDC, and SCIM.
• Educate operations to triage root causes of degradations.
• Stay updated on emerging threats impacting identity services.

Skills

SSO expertise

SAML/OIDC/OAuth2

Identity lifecycle automation

Python

Terraform/Ansible

Azure AD/Windows AD

Public cloud identity

Communication skills

Job description

Job Summary

Overview About the Business Unit: At the core of all that Epsilon does is a team that sets the foundation of our IT infrastructure. The team drives innovation and efficiency through pioneering technology across Epsilons platforms and business verticals. From being the first point of contact for infrastructure needs to final deployment, the team provides end-to-end solutions for our client-facing platforms. ETS supports all aspects of revenue-generating platforms for Epsilon and sets the architectural direction for our enterprise deployments. By adopting the newest technologies, such as Cloud, Automation, and Artificial Intelligence, the team is at the front of redefining our digital business and capturing new opportunities.

Why we are looking for you: You have at least 3 years of experience with design integration of Single Sign-On services or automating identity lifecycle software. You understand and have managed active directory services managing end-user s access You want to use or build experience with complex application end-user integrations across multiple cloud providers. You are passionate about the end-user experience in getting access to what they need. You can develop and automate repeatable patterns and want to contribute ideas to improvements in complex systems.

What you will enjoy in this role: As part of the Epsilon Identity Services team, you ll be the part of the shared services org that provides access to our employees and end clients, leading to impactful outcomes. You ll get to propose new ideas for optimization, efficiency, and security and see them to fruition. You ll influence reducing risk and enabling growth of our products. You ll get hands-on experience with new cloud technologies powered by SSO services. Click here to view how Epsilon transforms marketing with 1 View, 1 Vision and 1 Voice.

Responsibilities

• Lead design, development, and implementation of Single Sign-On services and Identity Lifecycle software for our workforce and our products.
• Assess, triage, and lead resolution or prevention of degraded SSO services.
• Develop scripts automated functions that provision SSO integrations.
• Evaluate business impact and risk exposure based on level of access granted and make improvement recommendations.
• Make service recommendations and develop improvements in automated efficiency.
• Integrate applications into SSO using various methods such as SAML, OIDC, and SCIM.
• Educate enable operations to triage identify root cause when degradations occur.
• Stay educated and aware of emerging threats and new capabilities or changes that might positively or negatively disrupt the business.

Qualifications

• 3+ years Single Sign-On expertise - preferably with Okta, Auth0, Ping, or Azure Entra.
• Deep understanding of SAML, OIDC, and Oauth 2.0 protocols
• 3+ years experience with identity lifecycle automation software like SailPoint
• Experience administering directory services such as Windows and Azure AD
• Expert knowledge assessing requirements and proposing best practice designs that integrate with complex applications.
• Proficient experience with Python, and additionally automation orchestration like Terraform, Ansible, or equivalent
• Expert knowledge to assess an end-user or application degradation and leading the resolution back to healthy state.
• Experience with public cloud identity access services.
• Strong written and oral communication skills across varying levels of the organization.