IAM Secure Access Engineer
Ernst and Young1 day ago
Wrocław, PolandMid Level / Senior
Responsibilities
- Design, configure, test, implement, and support authentication and federation integrations across enterprise, cloud, and hybrid environments.
- Implement and maintain MFA, SSO, passwordless authentication, risk-based access controls, Conditional Access, Identity Protection, and secure administrative access patterns.
- Configure and troubleshoot PingID, PingFederate, PingAccess, Okta, Microsoft Entra ID, and related authentication integrations.
- Support application onboarding and migration to modern authentication patterns and investigate authentication failures, policy conflicts, token issues, and access problems.
- Implement policy-based authorization and improve security for service principals, managed identities, application identities, and other non-human identities.
- Coordinate certificate, key, secret, vault, and identity lifecycle activities with PKI, vault, application, and vendor teams.
- Create technical designs, implementation plans, test cases, rollback plans, and operational documentation.
- Automate administration and validation tasks using PowerShell, REST APIs, or other approved scripting methods.
- Perform unit, integration, regression, and security testing; support deployments, post-deployment validation, incidents, problem management, vulnerability remediation, and continual improvement.
Requirements
- Degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
- 3 to 5 years of experience in IAM, authentication engineering, access management, security engineering, or enterprise platform support.
- Hands-on experience with at least two of Microsoft Entra ID, PingID, PingFederate, PingAccess, Okta, or PlainID.
- Working knowledge of SAML 2.0, OAuth 2.0, OpenID Connect, JWT, SCIM, LDAP, Kerberos, and RADIUS.
- Experience with Conditional Access, Identity Protection, workload identities, or modern authentication controls.
- PowerShell or comparable scripting experience, plus experience with REST APIs, JSON, and certificates.
- Experience creating deployment pipelines and release automation, with familiarity with Azure DevOps, GitHub Actions, Jenkins, or GitLab CI/CD.
- Basic containerization knowledge; Docker and Kubernetes are preferred.
- Experience configuring or supporting enterprise authentication and access management solutions and delivering controlled changes across development, test, and production environments.
- Ability to analyze technical issues, document findings, troubleshoot effectively, and work with distributed teams.
- Preferred experience with Microsoft Entra Conditional Access, Ping Identity products, Okta, PlainID, passwordless authentication, FIDO2, certificate-based authentication, PKI, CyberArk, Azure Key Vault, Azure, CI/CD, infrastructure automation, or relevant Microsoft, Ping Identity, Okta, security, or ITIL certifications.
Benefits
- Hybrid work arrangement in Katowice or Wroclaw: two days in the office and three days remote.
- Continuous learning, coaching, professional development, and opportunities to collaborate with global EY teams across multiple locations and service lines.
- Inclusive and diverse culture with flexibility and tools to support meaningful work.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.