Join EY and build a career that’s as unique as you are. Leverage global scale, inclusive culture, and cutting-edge technology to become your best self. Your unique perspective is vital in helping EY grow and create a better working world.

We are seeking a Senior Consultant with deep expertise in Airlock SSO/CIAM or similar identity and access management solutions to join our operations team. This role demands extensive experience in managing and optimizing SSO/CIAM environments, providing expert guidance, and ensuring the highest levels of security and efficiency.

Provide expert L2/L3 support for Airlock SSO/CIAM, resolving complex access, integration, and system outage issues. Configure and troubleshoot authentication methods, risk-based rules, and user profiles. Diagnose authentication failures and system degradations. Conduct impact analysis for platform and policy changes. Manage installations, configurations, deployments, patching, upgrades, and post-change validation.

Maintain incident remediation and operational documentation, including root cause analysis. Monitor platform health, backups, and integrations. Develop SSO policies and user guides to promote best practices. Perform security reviews and audits of configurations, recommending improvements. Coordinate with technical teams, security leads, stakeholders, and vendors. Offer technical guidance to junior team members and contribute to knowledge sharing. Produce service-level reports and performance metrics for continuous improvement. Ensure adherence to SLAs, ITIL processes, and documentation standards.

A Bachelor's degree in a relevant field or equivalent practical experience is required. Candidates should possess 4-8 years of overall Identity and Access Management experience, with significant hands-on expertise in Airlock Access Management or comparable enterprise solutions.

Essential skills include advanced experience with Airlock SSO operations, configuration, and troubleshooting. A strong understanding of federation protocols like SAML, OAuth 2.0, and OpenID Connect is crucial. Experience with enterprise Access Management products such as Airlock, Okta, PingFederate, Microsoft Entra ID, PingID, Azure MFA, or RSA is expected.

Proficiency in managing authentication policies, selectors, sessions, identity profiles, protocol endpoints, OAuth scopes, client registration, grant mappings, token mappings, and OIDC policies is necessary. Experience with application onboarding, IdP configuration, patching, upgrades, and production rollouts is also required. A good grasp of authentication, authorization, provisioning, IAM, and core security concepts is vital. Working knowledge of Windows, Linux, or Unix operating systems and monitoring tools is beneficial. Experience with ITIL-based service management and supporting global or remote teams, along with strong communication, stakeholder management, and technical documentation skills, are key.