Tower Lead - IAM Operations

Job Summary

Job Summary :  Microsoft Entra ID & Ping Identity SME

Job Description :  IAM SME with extensive experience in Microsoft Entra ID and Ping Identity solutions, specializing in SSO, MFA, Conditional Access, Identity Governance, Federation, OAuth, SAML, OpenID Connect, and enterprise authentication architecture. Proven expertise in securing cloud and on-premises applications while ensuring regulatory compliance and operational excellence  

Key Responsibilities

Job Responsibilities :  Administer and support Microsoft Entra ID and Ping Identity platforms. Design, implement, and maintain SSO solutions using SAML, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation. Configure and manage Conditional Access Policies and Zero Trust security controls. Implement and support MFA solutions for enterprise users and applications. Manage identity lifecycle processes including user onboarding, role changes, and offboarding. Integrate enterprise and cloud applications with Entra ID and Ping Identity. Configure and maintain PingFederate, PingOne, PingAccess, and PingDirectory environments. Troubleshoot authentication, federation, and access-related issues. Monitor IAM infrastructure and ensure high availability and security compliance. Conduct access reviews, entitlement validation, and audit support activities. Collaborate with security, cloud, infrastructure, and application teams on IAM initiatives. Create and maintain technical documentation, SOPs, and knowledge articles. Support security audits, regulatory compliance, and risk management activities. Skill Requirement :  Microsoft Entra ID (Azure Active Directory) Conditional Access Identity Protection Privileged Identity Management (PIM) Entra Connect / Cloud Sync B2B and B2C Identity Self-Service Password Reset (SSPR) Hybrid Identity 

Skill Requirements

Skill Requirement :  Microsoft Entra ID (Azure Active Directory) Conditional Access Identity Protection Privileged Identity Management (PIM) Entra Connect / Cloud Sync B2B and B2C Identity Self-Service Password Reset (SSPR) Hybrid Identity Management

Other Requirements

Other Requirement :  PingFederate PingOne PingAccess PingDirectory PingID Federation and Access Management Authentication Policies Identity Orchestration SSO MFA RBAC (Role-Based Access Control) IAM Governance Federation Services Identity Lifecycle Management Access Certification User Provisioning and Deprovisioning Protocols & Technologies SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) LDAP Active Directory Kerberos SCIM REST APIs SSL/TLS Certificates