GMS-Staff-SSO-MFA

The SSO & Access Management Staff are responsible for supporting the day-to-day operations of enterprise Single Sign-On (SSO) and Access Management platforms. This role involves application onboarding, incident and request management, user access administration, authentication troubleshooting, and platform monitoring activities. The individual will work with leading access management technologies such as Okta, PingFederate, Ping One, Microsoft Entra ID (Azure AD), and related authentication and federation solutions, while ensuring secure and reliable access to enterprise applications.

• Support the administration and maintenance of enterprise SSO and Access Management platforms including Okta, PingFederate or similar technologies.
• Provide L2/L2.5 operational support for authentication, authorization, SSO, MFA, and access-related incidents and requests.
• Assist with the management of user identities and organization groups within the Okta or Ping platform, ensuring accurate and timely provisioning and deprovisioning of access rights.
• Participate in the integration of new applications into the SSO environment, working closely with application owners and IT teams to ensure seamless Single Sign-On (SSO) functionality.
• Monitor SSO system performance and logs to proactively identify and address potential issues before they impact users.
• Contribute to the development and maintenance of policy documentation, user guides, and training materials to support end-users and promote best practices.
• Engage in regular security reviews and audits of SSO configurations to ensure alignment with industry standards and compliance requirements.
• Support the implementation of Multi-Factor Authentication (MFA) policies across the organization to enhance security posture.
• Collaborate with IT and security teams to refine and enforce access control policies, ensuring the principle of least privilege is maintained.
• Assist in the resolution of tickets and service requests related to Okta or Ping Federate, prioritizing based on impact and urgency.
• Keep abreast of new SSO features and updates, participating in relevant training and knowledge-sharing sessions to maintain expertise in the platform.
• Provide feedback and suggestions to improve the efficiency and effectiveness of the SSO service, including automation opportunities.

• Bachelors degree in computer science, Information Technology, Cybersecurity, or a related field.

• Willingness to be on call support engineer and work occasional overtime as required
• Willingness to work in rotational shifts as required
• Willingness to travel as required