IAM L3– Delinea & Duo

Sira Consulting, an Inc 5000 company; Dallas (TX); On-site; USD 120,000 - 180,000; Full time

Job summary

Sira Consulting is seeking an experienced IAM L3 Onsite Specialist for Dallas, TX. The role focuses on implementing, operating, and supporting large-scale IAM environments with hands-on expertise in access management, MFA, SSO, and PAM.

You will work with customer stakeholders, global teams, and security to resolve incidents, perform root-cause analysis, and ensure stable IAM operations. The ideal candidate has 8–12+ years in IAM, strong communication skills, and the ability to manage critical

Qualifications

• 8–12+ years of IAM implementation, engineering, and L3 production support experience in enterprise environments.
• Strong customer-facing experience with excellent oral and written communication skills.
• Ability to manage critical incidents, high-pressure escalations, RCA discussions, and technical calls with business and technology stakeholders.
• Relevant security certifications such as CISSP, CISM, CIAM, or vendor-specific IAM/PAM/MFA certifications are preferred.
• Open to work in shifts, onsite support, travel as required.

Responsibilities

• Provide L3 support for IAM, SSO, MFA, PAM, directory services, and access management platforms in a production environment.
• Support, troubleshoot, and administer Delinea or equivalent Privileged Access Management solutions, including vaulting, privileged account management, JIT access, and session-related issues.
• Implement, support, and troubleshoot Duo, Azure MFA, or equivalent MFA solutions, including push, OTP, token-based, and FIDO-based authentication methods.
• Design, support, and troubleshoot SSO and federation integrations using SAML, OIDC, OAuth, authentication flows, and access policies.
• Perform application onboarding and IAM integrations by coordinating with application owners, security teams, and infrastructure teams.
• Manage and troubleshoot LDAP and directory services such as Active Directory, Oracle Internet Directory, CA Directory, Sun Directory Server, Tivoli Directory Server, or equivalent platforms.
• Handle production incidents, service requests, problem tickets, and change requests while ensuring SLA adherence and operational stability.
• Lead technical troubleshooting, log analysis, root cause analysis, and permanent fix implementation for critical IAM issues and escalations.
• Configure and manage IAM policies, roles, tasks, workflows, access rules, RBAC models, least privilege controls, and access governance requirements.
• Support Joiner‑Mover‑Leaver processes, provisioning, deprovisioning, reconciliation, bulk operations, and identity lifecycle management activities.
• Generate IAM reports, audit data, access review extracts, and operational metrics to support compliance and governance requirements.
• Collaborate with global counterparts, customer stakeholders, vendors, and offshore teams for issue resolution, enhancements, and operational handovers.
• Participate in change implementation, release support, deployment validation, documentation, and knowledge transfer activities.
• Provide technical leadership during escalations and guide junior team members on IAM operations, troubleshooting, and best practices.
• Maintain clear operational documentation, runbooks, RCA documents, configuration details, and support procedures.

Skills

IAM expertise

Access Management

SSO & Federation

RBAC & Governance

MFA platforms

Customer-facing communication

Tools

Delinea PAM

Duo MFA

Azure MFA

LDAP

Active Directory

WebLogic

WebSphere

JBoss

Java/J2EE

Job description

We are looking for an experienced IAM L3 Onsite Specialist with 8–12+ years of hands‑on experience in Identity and Access Management implementation, operations, and production support. The role requires strong technical expertise in Access Management, Privileged Access Management, MFA, directory services, application onboarding, and L3 troubleshooting for large-scale enterprise environments. The candidate will work closely with customer stakeholders, global delivery teams, and security teams to support complex IAM solutions, resolve critical incidents, drive root cause analysis, and ensure stable IAM operations.

Key Responsibilities:

• Provide L3 support for IAM, SSO, MFA, PAM, directory services, and access management platforms in a production environment.
• Support, troubleshoot, and administer Delinea or equivalent Privileged Access Management solutions, including vaulting, privileged account management, JIT access, and session-related issues.
• Implement, support, and troubleshoot Duo, Azure MFA, or equivalent MFA solutions, including push, OTP, token-based, and FIDO-based authentication methods.
• Design, support, and troubleshoot SSO and federation integrations using SAML, OIDC, OAuth, authentication flows, and access policies.
• Perform application onboarding and IAM integrations by coordinating with application owners, security teams, and infrastructure teams.
• Manage and troubleshoot LDAP and directory services such as Active Directory, Oracle Internet Directory, CA Directory, Sun Directory Server, Tivoli Directory Server, or equivalent platforms.
• Handle production incidents, service requests, problem tickets, and change requests while ensuring SLA adherence and operational stability.
• Lead technical troubleshooting, log analysis, root cause analysis, and permanent fix implementation for critical IAM issues and escalations.
• Configure and manage IAM policies, roles, tasks, workflows, access rules, RBAC models, least privilege controls, and access governance requirements.
• Support Joiner‑Mover‑Leaver processes, provisioning, deprovisioning, reconciliation, bulk operations, and identity lifecycle management activities.
• Generate IAM reports, audit data, access review extracts, and operational metrics to support compliance and governance requirements.
• Collaborate with global counterparts, customer stakeholders, vendors, and offshore teams for issue resolution, enhancements, and operational handovers.
• Participate in change implementation, release support, deployment validation, documentation, and knowledge transfer activities.
• Provide technical leadership during escalations and guide junior team members on IAM operations, troubleshooting, and best practices.
• Maintain clear operational documentation, runbooks, RCA documents, configuration details, and support procedures.

Required Skills and Technologies:

• Strong expertise in IAM, Access Management, SSO, federation, authentication flows, RBAC, access governance, and least privilege principles.
• Hands‑on experience with Delinea or equivalent PAM tools, including privileged account vaulting, session management, JIT access, and privileged access workflows.
• Hands‑on experience with Duo, Azure MFA, or equivalent MFA platforms, including policy configuration, enrollment, authentication troubleshooting, and user support.
• Working knowledge of LDAP, Active Directory, Java/J2EE components, web services/SOAP, and application servers such as WebLogic, WebSphere, or JBoss will be an added advantage.

Qualifications and Professional Attributes:

• 8–12+ years of IAM implementation, engineering, and L3 production support experience in enterprise environments.
• Strong customer-facing experience with excellent oral and written communication skills.
• Ability to manage critical incidents, high-pressure escalations, RCA discussions, and technical calls with business and technology stakeholders.
• Relevant security certifications such as CISSP, CISM, CIAM, or vendor-specific IAM/PAM/MFA certifications are preferred.
• Open to work in shifts, provide onsite support, collaborate with global teams, and travel as required.