About the role
Job Title IAM SSO MFA L3 Engineer SME
This is a technical role requiring the engineer to design implement troubleshoot and manage enterprise Identity and Access Management solutions with a strong focus on Single SignOn SSO MultiFactor Authentication MFA
The engineer will work closely with application owners infrastructure teams security teams and thirdparty vendors to enable secure authentication and improve the organizations Zero Trust capabilities
Work Location Pune or Chennai preferred
Shift Timings Willingness to work in 24x5 supportoncall rotation including night shifts
Key Responsibilities
Provide L3 technical support and SMElevel expertise for SSO MFA and identity authentication issues
Respond to and resolve IAM incidents and service tickets within defined SLAs following established processes and procedures
Perform daytoday tasks across IAM platforms such as Active Directory Azure AD
Design implement and troubleshoot SSO integrations for enterprise and SaaS applications
Configure and manage SSO using SAML 20 OAuth 20 and OpenID Connect OIDC protocols
Configure and troubleshoot Microsoft Entra ID Enterprise Applications Application Registrations Service Principals authentication policies and related configurations
Implement and manage MFA and Conditional Access policies based on security and business requirements
Troubleshoot complex authentication issues involving SSO MFA federation claims tokens certificates and application configuration
Perform application onboarding to SSO including requirements gathering configuration testing UAT and production implementation
Work with application owners and vendors to resolve authentication and integration issues
Support identity federation and integration with externalSaaS applications
Configure and troubleshoot claims and attribute mappings including usergroup attributes required by applications
Monitor authentication activity and investigate authentication failures using Entra ID logs and security monitoring tools
Identify opportunities to automate repetitive IAMSSOMFA activities and improve operational efficiency
Develop and maintain technical documentation configuration standards troubleshooting guides and operational procedures
Maintain accurate ticket documentation ensure appropriate ticket updates and maintain SLAs
Provide technical guidance and mentoring to L2 IAM engineers
Participate in major incident resolution and provide rootcause analysis for recurring authentication issues
Ensure solutions follow security compliance and Zero Trust principles
Skills and Qualifications
Work Experience Minimum 10 years of handson experience in IAM Identity Engineering with significant handson experience in SSO and MFA
3 years of L3SMElevel experience supporting enterprise IAMSSO environments
Education Bachelors degree in computer science or a related field
Required Skills
oStrong handson experience with Microsoft Entra ID Azure AD
oStrong experience implementing and troubleshooting SSO and MFA solutions
oHandson experience with SAML 20 OAuth 20 and OIDC
oExperience with Entra ID Enterprise Apps App Registrations and Service Principals
oStrong understanding of Conditional Access MFA authentication methods and identity protection
oExperience with claims attributes token configuration certificates and federation concepts
oExperience integrating enterprise applications with Entra ID or other Identity Providers
oStrong troubleshooting skills using authenticationsignin logs and applicationside logs
oUnderstanding of Active Directory and hybrid identity environments
oExperience with PowerShell or scripting for IAM automation
oGood understanding of IAM RBAC least privilege Zero Trust and identity lifecycle concepts
oGood knowledge of ITIL practices and experience with ServiceNow
Good to Have Skills
oExperience with thirdparty Identity Providers or federation platforms
oExperience integrating SaaS and externally hosted applications with enterprise IAM platforms
oSCIMbased user provisioning and application lifecycle management
oKnowledge of PKI certificates TLS and application authentication dependencies
Soft Skills
oStrong communication skills Clearly communicate with team members users and other technical teams both verbally and in writing Strong documentation skills
oAnalytical troubleshooting mindset Ability to understand problems ask the right questions identify root causes and follow structured troubleshooting steps
oCustomer service orientation Ability to handle user issues professionally and provide a positive support experience
oTime priority management Ability to manage multiple SSO implementations and technical priorities simultaneously while meeting defined SLAs and prioritizing securitycritical issues
oTeam col