IAM Single Sign On L3 Engineer

Location : Bengaluru | WFO

Bluepace Tech is looking for an experienced IAM Single Sign-On (SSO) L3 Engineer with strong expertise in PingFederate, Ping Identity, and Microsoft Entra ID (Azure AD). The ideal candidate will be responsible for advanced technical support, solution design, implementation, troubleshooting, and continuous improvement of enterprise-level identity and access management solutions.

What you'll do:

Act as the L3 escalation point for complex SSO, federation, and authentication issues.

Perform root cause analysis (RCA) and implement permanent solutions to recurring incidents.

Design, implement, and enhance enterprise-level PingFederate and Microsoft Entra ID solutions.

Configure and manage identity federation using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).

Manage Service Provider (SP) and Identity Provider (IdP) integrations, application registrations, and PingFederate adapters.

Implement and manage security controls, including Multi-Factor Authentication (MFA), Conditional Access, and Privileged Identity Management (PIM).

Automate routine administration, monitoring, and management tasks using PowerShell scripting.

Maintain technical documentation, architectural diagrams, SOPs, and knowledge base articles.

Collaborate with application owners, security teams, DevOps, and architecture teams to deliver secure IAM solutions.

Mentor L1/L2 support engineers and provide technical guidance on complex IAM issues.

Must-have skills:

Strong hands-on experience with PingFederate and Single Sign-On (SSO).

Expertise in Microsoft Entra ID (Azure AD) administration and configuration.

Strong understanding of SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) protocols.

Experience configuring identity federation, authentication policies, application registrations, and adapters.

Knowledge of Conditional Access, MFA, PIM, role-based access control (RBAC), and identity security.

Experience handling L3 escalations, complex troubleshooting, incident management, and RCA.

Scripting and automation experience using PowerShell.

Strong documentation, stakeholder management, and problem-solving skills.

Preferred skills:

Knowledge of PingAccess and other Ping Identity solutions.

Experience with Entra Connect synchronization, roles, and access management.

Experience designing highly available, scalable, and secure SSO solutions.

Exposure to enterprise IAM architecture, security compliance, and continuous service improvement.

Key Competencies:

Identity & Access Management (IAM)
Single Sign-On (SSO)
PingFederate / Ping Identity
Microsoft Entra ID (Azure AD)
SAML 2.0 / OAuth 2.0 / OpenID Connect
Federation & Authentication
MFA / Conditional Access / PIM
PowerShell Automation
L3 Support / RCA / Incident Management
IAM Solution Design & Integration