IAM Engineer

Cross Sense Analytics LLC; Indianapolis (IN); On-site; USD 110,000 - 150,000; Full time

Job summary

Cross Sense Analytics LLC is seeking an experienced identity and access management consultant to architect a federated login across the bank's web applications. The project focuses on a single sign-on experience where users log in once to access all applications within the same session, supporting both employee and member accounts.

The engagement will evaluate Azure AD, Ping Access, and Ping Federate options, document a technical architecture, and assist with a POC and a conversion plan for

Qualifications

• Experience designing and implementing SSO across multiple web applications.
• Experience integrating Azure AD and on-prem Active Directory with cloud identity services.
• Knowledge of MFA integration and self-service password reset is a plus.

Responsibilities

• Outline options for using Azure, Ping Access and Ping Federate with architects.
• Document a technical architecture for the proposed solution.
• Assist in performing a POC that integrates with Azure AD and on-prem AD and test applications.
• Assist in developing a conversion plan migrating accounts and apps to the future state.

Skills

Identity federation concepts

Single Sign-On

Tools

Ping Access

Ping Federate

Site Minder

Azure Active Directory

Active Directory

Job description

Job Description

Job Description

Skills Needed

Ping Access, Ping Federate and Site Minder.

Business Requirements

• Architect a solution where all the bank's web applications can be accessed by logging in from a single login screen.
• The user experience should be that users will be authenticated one time and be able to access all the applications under the same web session.
• These web applications should be accessible by authenticating both employee accounts and member accounts
• The solution should provide for members and/or employees the ability to make requests for new access or changes access to bank services.
• The solution should provide for members and/or employees the ability self-service password reset.
• The solution should support Multi-Factor Authentication (MFA) for both employee and member accounts.

Technical Requirements

• Establish the capability to federate employee identities with Azure to allow employees to access Azure/Office 365 assets from both inside and outside of our network.
• Identify a solution that will allow for multiple Identity Providers (IdP) and Identity stores. These identity stores will primarily leverage Microsoft Active Directory and/or Azure Active Directory.
• In the future, some application services may be provided through Azure. The identity architecture should be able to accommodate this future need.

This engagement will:

• Outline the options available to using Azure, Ping Access and Ping Federate and discuss pros and cons with our architects
• Document a technical architecture the proposed solution in coordination with our architects
• Assist in performing a POC that includes configuring a development environment that integrates with Azure AD, a on premise instance of Active Directory and test instances of the existing applications.
• Assist in developing a conversion plan that will include migration of accounts and applications from the existing infrastructure to the future state architecture.