Senior Consultant, Airlock SSO/CIAM

We are seeking an experienced and knowledgeable Senior Consultant for Airlock SSO/CIAM or similar product to join our operations team. The ideal candidate will have a strong background in identity and access management, with extensive experience in managing and optimizing Airlock SSO and CIAM solutions. This role will involve leading operational initiatives, providing expert guidance, and ensuring the security and efficiency of our SSO environment.

Key Responsibilities:

• Provide expert L2 and L3 support for Airlock SSO/CIAM-related issues, including troubleshooting complex user access problems, application integration challenges, and system outages.
• Configure and troubleshoot access issues, MFA methods, risk-based authentication rules, and user-profile issues.
• Diagnose complex authentication failures, service degradation, and system outages.
• Perform technical and change-impact analysis for platform, policy, and application changes.
• Maintain installation, configuration, deployment, patching, upgrades, and post-change validation.
• Maintain incident remediation, root-cause, prevention, and operational documentation.
• Monitor platform, directory infrastructure, backups, and integrations for potential issues.
• Develop and maintain SSO policy documentation, user guides, and training materials to support end-users and promote best practices across the organization.
• Conduct regular security reviews and audits of Entra SSO configurations to ensure alignment with industry standards and compliance requirements and recommend improvements as necessary.
• Coordinate with technical teams, security leads, stakeholders, and product vendors.
• Provide technical guidance to junior team members and contribute to knowledge-management activities.
• Produce service-level reports, performance metrics, and recommendations for service improvement.
• Ensure adherence to SLAs, ITIL processes, change controls, and documentation standards.

Qualifications:

• Bachelor's degree in a related field, or equivalent practical experience.
• 4-8 years of overall Identity and Access Management experience, including strong hands-on experience with Airlock Access Management or similar.

Required Skills and Expertise:

• Advanced experience in Airlock SSO operations, configuration, and troubleshooting.
• Strong knowledge of federation and authorization protocols, including SAML, OAuth 2.0, and OpenID Connect.
• Experience with one or more enterprise Access Management products such as Airlock, Okta, PingFederate, Microsoft Entra ID, PingID, Azure MFA, or RSA.
• Ability to manage authentication policies, selectors, sessions, identity profiles, protocol endpoints, OAuth scopes, client registration policies, grant mappings, token mappings, and OIDC policies.
• Experience with application onboarding, IdP configuration, patch/version upgrades, and production rollout.
• Good knowledge of authentication, authorization, provisioning, IAM, and core security concepts.
• Working knowledge of Windows, Linux, or Unix operating-system internals and monitoring tools.
• Experience in ITIL-based service management and supporting global or remote teams.
• Strong verbal and written communication, stakeholder management, and technical documentation skills.

Preferred Certifications:

• ITIL or equivalent certification is preferred.
• CIAM, Microsoft Azure, or AWS certification or similar is an advantage.

Work Requirements:

• Willingness to work in shifts and provide on-call support as required.