[Hiring] Tech Analyst - IDAM SSO @Eurolaser Technologies

Role Description

This is a remote position.

• 8+ Years of Technical IAM Domain experience with minimum 5 years of experience in Microsoft Azure Identity Platform.
• Ability to delegate more routine tasks to other team members to support overall delivery.
• Work closely with the Product Owners, Stakeholders, Digital Security, Identity Architects, and Business Analysts on process design.

Responsibilities

• Design, deploy, configure, and administer Azure IDAM services to meet the organization's requirements.
• Good understanding of an organization’s security policies and Identity strategies.
• Hands-on experience on deploying multi-factor authentication (MFA) solutions and conditional access policies.
• Perform the gap analysis in Identity Governance processes.
• Monitor Azure AD services, investigate and resolve any issues related to user authentication, access permissions, and directory synchronization.
• Perform regular security assessments and identify and mitigate any vulnerabilities or risks.
• Good knowledge of Azure B2B collaboration, multi-tenant organizations, Cross tenant Synchronization, Security trust policies between organizations.
• Hands-on experience on SSO standards/protocols.
• Hands-on experience on AWS, Identity center.
• Collaborate with business stakeholders to integrate Azure AD with other systems, applications, and identity providers.
• Provide technical guidance and support to end-users, troubleshooting any Azure AD-related issues and incidents.
• Stay up to date with the latest Azure AD features, security best practices, and industry trends, and make recommendations for improvements.
• Good Knowledge of IGA.
• Document Azure AD configurations, processes, and procedures, ensuring that knowledge is effectively shared within the team.

Requirements

• Good experience in designing, implementing, and managing Azure IDAM services.
• Strong experience of Azure AD security features, including Conditional Access, Identity protection (User risk and sign in risk policies and investigation & remediation of risky users) and MFA (Multi-factor Authentication).
• Experience in API development with C#, PowerShell.
• Proven experience and solid understanding of FIDO2, OAuth, SAML and LDAP.
• Experience in Role-based access control implementation.
• Good understanding of threat handling, including:
• Identification
• Identify Attack Patterns
• Identify false positives
• Prevention
• Perform pro-active & reactive measures in response to Incidents/Threats
• Understanding of On-prem active directory.
• Understanding of authentication protocols (e.g., OAuth, OpenID Connect, SAML) and knowledge across Azure AD SSO on-boardings (SAML, OAuth/OIDC).
• Understanding of Azure AD Connect and directory synchronization.
• Good knowledge of PowerShell scripting for Azure AD automation and management.
• Strong problem-solving skills and the ability to troubleshoot and resolve complex Azure AD issues.
• Excellent communication and collaboration skills, with the ability to work effectively in cross-functional teams.

Desirable

• Troubleshooting and reporting via Azure AD sign in logs required. Log analytics/Azure Monitor querying experience desirable.
• Graph API basic knowledge and overview will be a bonus, experience with any similar management API could also be considered.
• Participate in deep-dive discussions/workshops with Microsoft Product Groups, e.g., Azure Identity Protection deep-dive and feedback session.
• Testing of new Microsoft features and private preview feedback when applicable, including:
• One time passcode for B2B users
• SSPR/MFA Converged Registration Experience
• SSPR Reporting