GMS-Senior-SSO-MFA
About this role
Key Responsibilities
- Administer and support enterprise SSO and Access Management platforms including Okta, PingFederate, Ping One, Microsoft Entra ID (Azure AD), and similar technologies.
- Provide L2/L3 operational support for authentication, authorization, federation, SSO, MFA, and access-related issues.
- Monitor platform health, availability, integrations, and security events to proactively identify and resolve issues.
- Manage incident, service request, problem, and change management activities in accordance with ITIL processes and SLAs.
- Perform root cause analysis (RCA) and implement corrective and preventive actions for recurring issues.
- Support user lifecycle management activities, including provisioning, de-provisioning, access modifications, and entitlement management.
- Lead and support onboarding of enterprise applications to SSO platforms.
- Configure and troubleshoot SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation integrations.
- Coordinate with application owners, infrastructure teams, and business stakeholders during onboarding and enhancement activities.
- Manage certificates, metadata updates, federation configurations, and authentication policies.
- Support periodic access reviews, certification campaigns, and audit activities.
- Ensure compliance with organizational security standards, compliance requirements, and IAM best practices.
- Assist in implementation and maintenance of Role-Based Access Control (RBAC) and access governance processes.
- Maintain operational and technical documentation, SOPs, runbooks, and knowledge articles.
- Drive continuous service improvement initiatives to enhance platform stability, user experience, and operational efficiency.
- Identify automation opportunities for repetitive operational tasks and reporting.
- Provide recommendations for improving authentication and access management processes.
- Collaborate closely with business application owners, security teams, infrastructure teams, and IAM stakeholders.
- Provide technical guidance and mentoring to junior analysts and team members.
- Participate in governance meetings, operational reviews, and client/service management discussions.
- Prepare operational reports, dashboards, KPI metrics, SLA performance reports, and management updates.
Preferred Skills
- 3-6 years of experience in identity and access management, with a strong focus on Okta/Ping Federate or similar IAM platforms.
- In-depth knowledge of IAM principles, SSO, MFA, directory services, and cloud identity management.
- Proven track record of managing complex user provisioning and de-provisioning scenarios.
- Familiarity with IT security standards and compliance frameworks (e.g., SOX, HIPAA, GDPR).
- Excellent analytical, problem-solving, and project management skills.
- Strong leadership abilities and experience mentoring junior staff.
- Effective communication and interpersonal skills, with the ability to interact with various stakeholders.
- Relevant certifications (e.g., Okta Certified Administrator, Okta Certified Consultant, Okta Certified Professional) are highly desirable
Education
- Bachelor’s degree in computer science, Information Technology, Cybersecurity, Engineering, or a related field.
Work Requirements
- Willingness to work in rotational shifts supporting global operations.
- Willingness to participate in on-call support rotations.
- Ability to support critical production incidents outside standard business hours when required.
- Willingness to travel occasionally based on business requirements.
- Ability to work effectively within a Managed Services delivery model.
EY | Building a better working world
EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.
Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.
Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.
- Start applying with LinkedIn
- Apply Now Start
-
Please wait...
- Connect with us
- Our locations
- My EY
- Site map
- Legal and privacy
- Labor condition applications
- Cookie Consent Manager
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
-
Opens in a new tab.
EY refers to the global organization, and may refer to one or more, of the member firms of Ernst & Young Global Limited, each of which is a separate legal entity. Ernst & Young Global Limited, a UK company limited by guarantee, does not provide services to clients.
×Cookie Consent Manager
When you visit any website, it may store or retrieve information on your browser, mostly in the form of cookies. Because we respect your right to privacy, you can choose not to allow some types of cookies. However, blocking some types of cookies may impact your experience of the site and the services we are able to offer.
Required Cookies
These cookies are required to use this website and can't be turned off.
Required Cookies