IAM Secure Access Engineer
Ernst and Young4 days ago
Wrocław, PolandMid Level / Senior
Responsibilities
- Design, configure, test, implement, and support authentication and federation integrations across enterprise, cloud, and hybrid environments.
- Implement and maintain MFA, single sign-on, passwordless authentication, risk-based access controls, and Microsoft Entra Conditional Access policies.
- Configure and troubleshoot PingID, PingFederate, PingAccess, Okta, Microsoft Entra ID, and PlainID integrations.
- Support application onboarding and migration to modern authentication patterns and investigate authentication, token, policy, and access issues.
- Implement role-based, attribute-based, and policy-based authorization and improve security for workload, service principal, managed, and application identities.
- Support migration from shared secrets to managed identities, certificates, or approved vault-based patterns and coordinate certificate, key, and secret lifecycle activities.
- Create technical designs, implementation plans, test cases, rollback plans, operational documentation, change requests, and deployment support materials.
- Automate administration and validation tasks using PowerShell, REST APIs, or other approved scripting methods.
- Perform unit, integration, regression, and security testing and participate in incident, problem, vulnerability remediation, and continual improvement activities.
Requirements
- Degree in Computer Science, Information Technology, Cybersecurity, or a related discipline, or equivalent practical experience.
- 2–5 years of experience in IAM, authentication engineering, access management, security engineering, or enterprise platform support.
- Hands-on experience with at least two of Microsoft Entra ID, PingID, PingFederate, PingAccess, Okta, or PlainID.
- Working knowledge of SAML, OAuth 2.0, OpenID Connect, JWT, SCIM, LDAP, Kerberos, and RADIUS.
- Experience with Conditional Access, Identity Protection, workload identities, or modern authentication controls.
- PowerShell or comparable scripting experience and ability to work with REST APIs, JSON, and certificates.
- Experience creating deployment pipelines, release automation, and controlled changes across development, test, and production environments.
- Familiarity with Azure DevOps, GitHub Actions, Jenkins, or GitLab CI/CD.
- Basic containerization knowledge, with Docker or Kubernetes preferred.
- Preferred experience with passwordless authentication, FIDO2, certificate-based authentication, PKI, CyberArk, Azure Key Vault, or another enterprise secrets platform.
- Preferred familiarity with Azure, infrastructure automation, and relevant Microsoft, Ping Identity, Okta, security, or ITIL certification.
- Strong troubleshooting, documentation, testing, stakeholder communication, technical analysis, and distributed-team collaboration skills.
Benefits
- Hybrid work arrangement in Wrocław or Katowice with 2 days in the office and 3 days remote.
- Continuous learning, coaching, skills development, and opportunities to work with global teams and well-known brands.
- Dynamic, diverse, and inclusive global delivery environment with flexibility to make a meaningful impact.
Tech Stack
Categories
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.