Sr. IAM Engineer

Associate III - Cloud Infrastructure Services Who we are: At UST, we help the world’s best organizations grow and succeed through transformation. Bringing together the right talent, tools, and ideas, we work with our client to co-create lasting change. Together, with over 30,000 employees in 25 countries, we build for boundless impact—touching billions of lives in the process. Visit us at .

You are: an experienced Identity and Access Management (IAM) Engineer with strong expertise in Single Sign-On (SSO), PingFederate, EntraID and modern authentication methodologies, including WebAuthn and FIDO2 protocols. The ideal candidate will be responsible for designing, implementing, and managing secure authentication and authorization frameworks to support enterprise applications and services.

The Opportunity:

· Design, implement, and manage SSO solutions using PingFederate, Entra and related IAM technologies · Configure and maintain federation protocols such as SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) · Integrate enterprise applications with IAM platforms for seamless authentication and access control · Implement and support modern passwordless authentication mechanisms using WebAuthn and FIDO2 standards · Drive implementation of Agentic Identity concepts, enabling secure identity for autonomous agents and AI-driven interactions · Manage identity lifecycle processes including onboarding, provisioning, de-provisioning, and role-based access · Troubleshoot and resolve authentication, authorization, and federation issues · Collaborate with application teams to ensure secure and scalable identity solutions · Conduct security assessments and audits related to authentication flows and identity infrastructure · Develop and maintain IAM documentation, runbooks, and architecture diagrams · Stay updated with evolving security standards, vulnerabilities, and IAM best practices

What are we Looking for:

· Bachelor s degree in Computer Science, Information Security, or related field · 5+ years of experience in Identity and Access Management · Hands-on experience with PingFederate (installation, configuration, and troubleshooting) · Strong understanding of SSO concepts and federation technologies · Expertise in authentication protocols: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) Practical experience with WebAuthn and FIDO2-based authentication Familiarity with multi-factor authentication (MFA) and passwordless authentication solutions Experience with directory services (e.g., Active Directory, LDAP) Proficiency in scripting languages (e.g., Python, Bash, PowerShell) is a plus Strong analytical and problem-solving skills Preferred Qualifications Experience with other IAM tools such as PingOne, EntraID Knowledge of Zero Trust architecture principles Experience in cloud environments (AWS, Azure, GCP) Relevant certifications such as CIAM, Ping certifications and CISSP Key Competencies Strong understanding of identity security best practices Excellent communication and collaboration skills Ability to work in a fast-paced, enterprise environment Attention to detail and a security-first mindset

What we believe

• We’re proud to embrace the same values that have shaped UST since the beginning. Since day one, we’ve been building enduring relationships and a culture of integrity. And today, it's those same values that are inspiring us to encourage innovation from everyone to champion diversity and inclusion and to place people at the centre of everything we do.

• Humility: We will listen, learn, be empathetic and help selflessly in our interactions with everyone. Humanity: Through business, we will better the lives of those less fortunate than ourselves. Integrity: We honour our commitments and act with responsibility in all our relationships.

• Equal Employment Opportunity Statement

• UST is an Equal Opportunity Employer. We believe that no one should be discriminated against because of their differences, such as age, disability, ethnicity, gender, gender identity and expression, religion, or sexual orientation.

All employment decisions shall be made without regard to age, race, creed, colour, religion, sex, national origin, ancestry, disability status, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, citizenship status or any other basis as protected by federal, state, or local law. UST reserves the right to periodically redefine your roles and responsibilities based on the requirements of the organization and/or your performance.

• To support and promote the values of UST. • Comply with all Company policies and procedures

azure iam,pingfederate,entraid,openid connect,