Job Details

Email to Friend Save Back

IAM Solutions Engineer / Architect

CHICAGO-60619, IL, US
08/28/2019

-

Required Skills

Azure Active Directory

Company

Infinity Consulting Solutions, Inc

Experience

Job Description

IAM Solutions Engineer / Architect

Senior Engineer and Solutions Architect for the Global Identity & Access Management (IAM) platform.

The ideal candidate should have 3-4 years of experience in engineering an Identity Provider, including base SSO setup via SAML/OpenID Connect, B2B Federation Connection configuration, including B2C "Business to Customer" flow.

The Candidate will also possess experience with standard expression logic and PowerShell scripting used in analytical reporting and custom attribute patterns.

Although Okta experience would be a definite plus and is included in the requirements below, our Customer is open to interviewing qualified candidates without the Okta expertise.

The selected Candidate will be working closely with internal and external customers as a fellow member of a Global IAM team, as well as cross-functional Global Developers seeking to implement applications for single sign-on.

This person will serve as the Department Expert for Architectural Solution Design and Documentation (Product Roadmaps, etc.), including PowerShell scripting to maintain and design analytical reports in Okta.
This Candidate will also design and implement custom application-level expression languages regarding attribute manipulation.

Required Skills:

PowerShell Scripting & Okta Expression languages for attribute manipulation and reporting within Okta IdP

Create or modify SSO connections to SaaS Providers using Okta

Create or modify B2B SSO connections from external clients to internal service offerings using Okta

Social Authentication through Google, Self-registration, etc. within Okta

Troubleshoot any faulty IdP or SP SSO connections at the application, user, or client level

Security Assertion Markup Language (SAML 2.0), WSFED, OpenID Connect/OAuth as it relates to enabling applications for authentication services and SSO

Support End Users with authentication or SSO issues through ticket queue management as a Level 3
engineer

Support developers attempting to instrument their applications with authentication services and SSO through Okta

Architecture Skills:

Interest in maintaining current with Okta product features and enhancements and turning those into deliverable solutions and roadmap items

Ability to maintain and develop Identity product roadmaps by gathering requirements and maintaining
close relationships with consumers and Global Enterprise Architecture divisions

Product Experience & Technical Skills:

Okta Identity Management – Life-Cycle Management, Adaptive MFA, API Access Management, etc.

PowerShell scripting – Custom application expression statements for attribute or account level manipulation

Active Directory (Azure) & LDAP

Active Directory Federation Services (ADFS)

Experience with Ping Federate welcome; however, not required

Experience with development; specifically, object-oriented languages is desirable

Required to have significant exposure to Okta IdP tool across the following patterns: SAML, OpenID
Connect, WSFED, Delegated Authentication via Active Directory, Multi-Factor Authentication, Consumer-
Oriented Authentication (Social Auth), Radius (Citrix)

Extremely comfortable constructing & documenting a product roadmap within Identity & Access
Management

Comfortable documenting solution alternative patterns and offering recommendations both within and outside of the Global Identity Team

Exposure to Windows Azure and Office 365; specifically, Azure Active Directory

Excellent knowledge of B2B Identity Federation setup/enhancements, outbound SSO, and B2B connections through IdPs

The ability to interface with client-side IdP Architects, Administrators, Developers and Engineers

The ability to recognize the technical dependencies and impacts across the Program/Projects that involve and require identity and access solutions

Experience managing level 2+, 3 problem/support tickets, and dealing with user-level support issues for a
Global Organization that operates 24x7. Individual must be willing to work within a monthly on-call rotation schedule