EY—GMS-Senior-SSO-MFA

Job description

Description: At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all. GDS – IAM MS SSO– Senior Job Summary The SSO & Access Management Senior Consultant is responsible for providing operational support, administration, and continuous improvement of enterprise Single Sign-On (SSO) and Access Management platforms. This role supports global IAM operations through monitoring, troubleshooting, incident resolution, application onboarding, access governance, and platform optimization activities. The consultant will work across industry-leading SSO technologies such as Okta, PingFederate, Ping One, Microsoft Entra ID (Azure AD), and related authentication and federation solutions, while ensuring adherence to security, compliance, and service management standards. Key Responsibilities - Administer and support enterprise SSO and Access Management platforms including Okta, PingFederate, Ping One, Microsoft Entra ID (Azure AD), and similar technologies. - Provide L2/L3 operational support for authentication, authorization, federation, SSO, MFA, and access-related issues. - Monitor platform health, availability, integrations, and security events to proactively identify and resolve issues. - Manage incident, service request, problem, and change management activities in accordance with ITIL processes and SLAs. - Perform root cause analysis (RCA) and implement corrective and preventive actions for recurring issues. - Support user lifecycle management activities, including provisioning, de-provisioning, access modifications, and entitlement management. - Lead and support onboarding of enterprise applications to SSO platforms. - Configure and troubleshoot SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation integrations. - Coordinate with application owners, infrastructure teams, and business stakeholders during onboarding and enhancement activities. - Manage certificates, metadata updates, federation configurations, and authentication policies. - Support periodic access reviews, certification campaigns, and audit activities. - Ensure compliance with organizational security standards, compliance requirements, and IAM best practices. - Assist in implementation and maintenance of Role-Based Access Control (RBAC) and access governance processes. - Maintain operational and technical documentation, SOPs, runbooks, and knowledge articles. - Drive continuous service improvement initiatives to enhance platform stability, user experience, and operational efficiency. - Identify automation opportunities for repetitive operational tasks and reporting. - Provide recommendations for improving authentication and access management processes. - Collaborate closely with business application owners, security teams, infrastructure teams, and IAM stakeholders. - Provide technical guidance and mentoring to junior analysts and team members. - Participate in governance meetings, operational reviews, and client/service management discussions. - Prepare operational reports, dashboards, KPI metrics, SLA performance reports, and management updates. Preferred Skills - 3-6 years of experience in identity and access management, with a strong focus on Okta/Ping Federate or similar IAM platforms. - In-depth knowledge of IAM principles, SSO, MFA, directory services, and cloud identity management. - Proven track record of managing complex user provisioning and de-provisioning scenarios. - Familiarity with IT security standards and compliance frameworks (e.g., SOX, HIPAA, GDPR). - Excellent analytical, problem-solving, and project management skills. - Strong leadership abilities and experience mentoring junior staff. - Effective communication and interpersonal skills, with the ability to interact with various stakeholders. - Relevant certifications (e.g., Okta Certified Administrator, Okta Certified Consultant, Okta Certified Professional) are highly desirable Education - Bachelor’s degree in computer science, Information Technology, Cybersecurity, Engineering, or a related field. Work Requirements - Willingness to work in rotational shifts supporting global operations. - Willingness to participate in on-call support rotations. - Ability to support critical production incidents outside standard business hours when required. - Willingness to travel occasionally based on business requirements. - Ability to work effectively within a Managed Services delivery model. EY | Building a better working world EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets. Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate. Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.