Security Engineer
Ernst and Young3 days ago
Bengaluru, IndiaMid Level / Senior
Responsibilities
- Design, configure, support, test, and implement authentication and federation integrations across enterprise, cloud, and hybrid environments.
- Implement and maintain MFA, SSO, passwordless authentication, risk-based access controls, Conditional Access policies, authentication strengths, authentication contexts, and protected actions.
- Configure and troubleshoot PingID, PingFederate, PingAccess, Okta, and Microsoft Entra ID integrations and support application onboarding and migration.
- Implement policy-based authorization and improve security for service principals, managed identities, application identities, and other non-human identities.
- Support migration from shared secrets to managed identities, certificates, or approved vault-based patterns and coordinate certificate, key, and secret lifecycle activities.
- Create technical designs, implementation plans, test cases, rollback plans, and operational documentation; manage change requests and production deployments.
- Automate administration and validation tasks using PowerShell, REST APIs, or other approved scripting methods.
- Perform unit, integration, regression, and security testing; support post-deployment validation, incident response, problem management, vulnerability remediation, and continual improvement.
- Collaborate with Architecture, Product, Operations, application teams, vendors, and distributed stakeholders to deliver secure, supportable solutions.
Requirements
- Degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
- 2 to 5 years of experience in IAM, authentication engineering, access management, security engineering, or enterprise platform support.
- Hands-on experience with at least two of Microsoft Entra ID, PingID, PingFederate, PingAccess, Okta, or PlainID.
- Knowledge of authentication, authorization, identity federation, MFA, SSO, Zero Trust, Conditional Access, identity protection, workload identities, or modern authentication controls.
- Working knowledge of SAML 2.0, OAuth 2.0, OpenID Connect, JWT, SCIM, LDAP, Kerberos, and RADIUS.
- Experience with PowerShell or comparable scripting, REST APIs, JSON, certificates, enterprise authentication solutions, and controlled changes across development, test, and production environments.
- Experience creating deployment pipelines and release automation, with familiarity with Azure DevOps, GitHub Actions, Jenkins, or GitLab CI/CD.
- Basic containerization knowledge; Docker and Kubernetes are preferred.
- Preferred experience with passwordless authentication, FIDO2, certificate-based authentication, PKI, CyberArk, Azure Key Vault, Azure, infrastructure automation, and relevant Microsoft, Ping Identity, Okta, security, or ITIL certifications.
- Strong troubleshooting, documentation, testing, stakeholder communication, technical analysis, and distributed-team collaboration skills.
Benefits
- Flexible working in a globally diverse team.
- Benefits supporting physical, emotional, financial, and social well-being, subject to country availability.
- Continuous learning, career development tools, coaching, and leadership development.
- Diverse and inclusive culture with opportunities to make a significant impact.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.