Single Sign-On and Access Management Specialist

Ernst & Young LLP ( EY India ); Bengaluru; On-site; INR 800,000 - 1,200,000; Full time

Job summary

EY India is hiring for an SSO & MFA Staff to support enterprise SSO and Access Management platforms, using Okta, PingFederate, Ping One and Azure AD to ensure secure access to enterprise applications. You will manage onboarding, incidents, user provisioning and MFA policy deployment, while contributing to security audits and policy updates.

Role requires willingness to be on-call, work in rotational shifts and travel as needed, with collaboration across IT and security teams.

Qualifications

• Bachelor’s degree in computer science, information technology, cybersecurity or related field.
• Willingness to be on-call and work rotational shifts as required.
• Willingness to travel as required.

Responsibilities

• Support administration and maintenance of SSO and access management platforms (Okta, PingFederate, Ping One).
• Provide L2/L2.5 operational support for authentication, authorization, SSO, MFA and access incidents.
• Manage user identities and provisioning/deprovisioning across platforms.
• Assist with onboarding of new applications and ensure seamless SSO functionality.
• Monitor system performance and security, and participate in policy/documentation updates.

Skills

IAM operations

Okta

PingFederate

Ping One

Azure AD / Entra ID

SSO

MFA

access management

SAML

OAuth/OpenID

Education

Bachelor’s degree in CS/IT/Cybersecurity or related field

Tools

Okta

PingFederate

Ping One

Azure AD / Entra ID

Job description

GMS-Staff-SSO-MFA At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. GDS – IAM MS– Staff The SSO & Access Management Staff are responsible for supporting the day-to-day operations of enterprise Single Sign-On (SSO) and Access Management platforms. This role involves application onboarding, incident and request management, user access administration, authentication troubleshooting, and platform monitoring activities. The individual will work with leading access management technologies such as Okta, PingFederate, Ping One, Microsoft Entra ID (Azure AD), and related authentication and federation solutions, while ensuring secure and reliable access to enterprise applications.

Key Requirements / Responsibilities:

• Support the administration and maintenance of enterprise SSO and Access Management platforms including Okta, PingFederate or similar technologies.
• Provide L2/L2.5 operational support for authentication, authorization, SSO, MFA, and access-related incidents and requests.
• Assist with the management of user identities and organization groups within the Okta or Ping platform, ensuring accurate and timely provisioning and deprovisioning of access rights.
• Participate in the integration of new applications into the SSO environment, working closely with application owners and IT teams to ensure seamless Single Sign-On (SSO) functionality.
• Monitor SSO system performance and logs to proactively identify and address potential issues before they impact users.
• Contribute to the development and maintenance of policy documentation, user guides, and training materials to support end-users and promote best practices.
• Engage in regular security reviews and audits of SSO configurations to ensure alignment with industry standards and compliance requirements.
• Support the implementation of Multi-Factor Authentication (MFA) policies across the organization to enhance security posture.
• Collaborate with IT and security teams to refine and enforce access control policies, ensuring the principle of least privilege is maintained.
• Assist in the resolution of tickets and service requests related to Okta or Ping Federate, prioritizing based on impact and urgency.
• Keep abreast of new SSO features and updates, participating in relevant training and knowledge-sharing sessions to maintain expertise in the platform.
• Provide feedback and suggestions to improve the efficiency and effectiveness of the SSO service, including automation opportunities.

Preferred Skills:

• Good understanding of identity and access management concepts.
• Strong desire to learn and develop skills in IAM operations and cloud security.
• Good problem-solving abilities and attention to detail.
• Effective communication skills and the ability to work collaboratively within a team environment
• Extensive experience in IAM operations, with a strong focus on Okta, Ping Federate or related technologies
• Knowledge of federation protocols – SAML, OAuth & OpenID
• Understanding of IAM concepts, cloud security, and operational best practices.

Education:

• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related field.

Work Requirements:

• Willingness to be on call support engineer and work occasional overtime as required
• Willingness to work in rotational shifts as required
• Willingness to travel as required

EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.