Job Title

IAM SSO MFA L3 Engineer SME

Role Summary

This is a technical role requiring the engineer to design implement troubleshoot and manage enterprise Identity and Access Management solutions with a strong focus on Single SignOn SSO MultiFactor Authentication MFA.

The engineer will work closely with application owners infrastructure teams security teams and thirdparty vendors to enable secure authentication and improve the organizations Zero Trust capabilities.

Work Location

Pune or Chennai preferred

Shift Timings

Willingness to work in 24x5 support on call rotation including night shifts

Key Responsibilities

- Provide L3 technical support and SMElevel expertise for SSO MFA and identity authentication issues
- Respond to and resolve IAM incidents and service tickets within defined SLAs following established processes and procedures
- Perform daytoday tasks across IAM platforms such as Active Directory Azure AD
- Design implement and troubleshoot SSO integrations for enterprise and SaaS applications
- Configure and manage SSO using SAML 20 OAuth 20 and OpenID Connect OIDC protocols
- Configure and troubleshoot Microsoft Entra ID Enterprise Applications Application Registrations Service Principals authentication policies and related configurations
- Implement and manage MFA and Conditional Access policies based on security and business requirements
- Troubleshoot complex authentication issues involving SSO MFA federation claims tokens certificates and application configuration
- Perform application onboarding to SSO including requirements gathering configuration testing UAT and production implementation
- Work with application owners and vendors to resolve authentication and integration issues
- Support identity federation and integration with externalSaaS applications




- Configure and troubleshoot claims and attribute mappings including usergroup attributes required by applications
- Monitor authentication activity and investigate authentication failures using Entra ID logs and security monitoring tools
- Identify opportunities to automate repetitive IAMSSOMFA activities and improve operational efficiency
- Develop and maintain technical documentation configuration standards troubleshooting guides and operational procedures
- Maintain accurate ticket documentation ensure appropriate ticket updates and maintain SLAs
- Provide technical guidance and mentoring to L2 IAM engineers
- Participate in major incident resolution and provide rootcause analysis for recurring authentication issues
- Ensure solutions follow security compliance and Zero Trust principles

Skills and Qualifications

Work Experience

- Minimum 10 years of handson experience in IAM Identity Engineering with significant handson experience in SSO and MFA
- 3 years of L3SMElevel experience supporting enterprise IAMSSO environments

Education

- Bachelors degree in computer science or a related field

Required Skills

- Strong handson experience with Microsoft Entra ID Azure AD
- Strong experience implementing and troubleshooting SSO and MFA solutions
- Handson experience with SAML 20 OAuth 20 and OIDC
- Experience with Entra ID Enterprise Apps App Registrations and Service Principals




- Strong understanding of Conditional Access MFA authentication methods and identity protection
- Experience with claims attributes token configuration certificates and federation concepts
- Experience integrating enterprise applications with Entra ID or other Identity Providers
- Robust troubleshooting skills using authenticationsignin logs and applicationside logs
- Understanding of Active Directory and hybrid identity environments
- Experience with PowerShell or scripting for IAM automation
- Good understanding of IAM RBAC least privilege Zero Trust and identity lifecycle concepts
- Good knowledge of ITIL practices and experience with ServiceNow

Good to Have Skills

- Experience with thirdparty Identity Providers or federation platforms
- Experience integrating SaaS and externally hosted applications with enterprise IAM platforms
- SCIMbased user provisioning and application lifecycle management
- Knowledge of PKI certificates TLS and application authentication dependencies

Soft Skills

- Strong communication skills: Clearly communicate with team members users and other technical teams both verbally and in writing Strong documentation skills
- Analytical troubleshooting mindset: Ability to understand problems ask the right questions identify root causes and follow structured troubleshooting steps
- Customer service orientation: Ability to handle user issues professionally and provide a positive support experience
- Time priority management: Ability to manage multiple SSO implementations and technical priorities simultaneously while meeting defined SLAs and prioritizing securitycritical issues
- Team col

Skills

Mandatory Skills:

MS PKI for Certificate Management

Good to Have Skills:

Access Management, Microsoft Copilot

📌 IAM SSO MFAEngineer SME (Chennai)
🏢 Alike Thoughts
📍 Chennai