Analyst - IAM SSO Engineer

Overview The Identity and Access Management (IAM) Engineer will be a mid-level technical resource responsible for implementing, integrating, and supporting authentication solutions across on-premises and cloud environments. This role requires strong hands-on experience with SSO, MFA, application integrations, infrastructure components, cloud platforms, and scripting to support secure and reliable authentication services. The ideal candidate is hands-on, technically strong, and able to troubleshoot complex authentication, integration, and infrastructure issues with limited guidance. This role is based out of Hyderabad, India and requires coming into the office. Responsibilities Implement and support authentication solutions across SSO, MFA, and identity federation use cases. Ensure seamless user authentication experiences across applications and platforms. Configure and integrate applications with IAM platforms such as Okta, Auth0, PingFederate, or similar access management tools. Support authentication capabilities such as user registration, self-service, authentication, authorization, administration, audit, and reporting. Integrate applications using modern protocols such as SAML, OAuth 2.0, OIDC, and header-based authentication. Support IAM platform improvements that align with security, infrastructure, and business requirements. Identify opportunities for improving the SSO/Okta environment and implement enhancements. Work with application, infrastructure, cloud, security, and development teams to gather requirements and implement effective authentication solutions. Configure access policies, sign-on policies, MFA rules, and risk-based authentication controls based on business and security requirements. Collaborate with stakeholders to define and maintain authentication standards. Conduct regular system audits to ensure performance and compliance with security standards. Knowledge of regulatory compliance standards and experience with audit support activities. Partner with Cybersecurity, API, application, and infrastructure teams to document authentication patterns, integration standards, and troubleshooting steps. Stay current with emerging security threats, technologies, and industry trends to continuously improve the security posture. Assesses current applications and architecture to ensure current implementations align with industry guidelines, best practices and management approved standards. Develop and maintain scripts or automation to simplify IAM operations, reporting, monitoring, and integration support activities. Provide advanced production support to diagnose and resolve authentication, SSO, MFA, integration, agent, network, and infrastructure-related issues. Participate in incident response and security incident investigations related to IAM systems. Develop and deliver applicable documentation, training, and knowledge transfer to both internal and external stakeholders. Evaluate and hands on implement automation capabilities to simplify processes and deliver value/cost savings to the business. Foster the Agile DevOps culture through the latest toolset to improve customer satisfaction through rapid, continuous delivery. Qualifications Minimum Qualifications: 6+ years of overall IT experience 4+ years of hands-on experience supporting authentication, SSO, MFA, or access management solutions 4+ years of hands-on experience with Okta, Auth0, PingFederate, Azure AD/Entra ID, or comparable access management tools 3+ years of scripting or automation experience using PowerShell, Python, JavaScript, REST APIs, or similar technologies Working knowledge of infrastructure, networking, cloud, and DevOps concepts used to support authentication platforms Okta Certified Administrator or equivalent IAM certification preferred BS/BA degree or equivalent experience Security, cloud, or CIAM certifications are a plus Experience with CIC/Auth0 platform is a plus. Preferred Qualifications: Proven track record in implementing IAM solutions in a large, complex environment. Strong understanding of federated authentication, SSO, and SAML along with the ability to make recommendations, scope, and execute on opportunities for automation or improvement in identity system architecture. Hands-on experience implementing authentication services in enterprise environments. Experience supporting IAM or CIAM implementation activities, including requirements review, configuration, testing, and deployment. Proven track record of understanding B2B and B2C customer needs and delivering solutions that enhance user experience while maintaining security and compliance standards. Thorough understanding of security best practices, privacy regulations (such as GDPR, CCPA), and compliance requirements related to customer data protection. Broader IAM domain experience with focus on information security Deep technical expertise in solutioning and integrating B2B, B2C applications with CIAM. Strong working knowledge of IAM platforms such as Okta, PingFederate, Auth0, Azure AD/Entra ID, or similar tools used to enable SSO for cloud and on-premises applications. Hands-on experience building SSO integrations using SAML, OAuth 2.0, OIDC, header-based authentication, and federation patterns. Experience in designing Consumer identity and access management solutions Strong understanding of the latest security principles like zero trust and passwordless authentication to implement new standards in the authentication model. Must have working knowledge of Okta Lifecycle Management and Administrative APIs Experience with solutions like CyberArk, Beyond Trust, RSA or comparable products. Excellent understanding of REST integration concepts Experience in directory services like Oracle LDAP, and AD Experience supporting authentication services in cloud environments such as AWS, Azure, or hybrid infrastructure. Hands-on scripting or development experience using JavaScript, Python, PowerShell, Java, Node.js, REST APIs, or similar techno