Application Engineer - III-ES and F33-P

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.          EY-Cyber Security-IAM- Consulting- Risk   At EY, we’re all in to shape your future with confidence. We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go. Join EY and help to build a better working world.   About Global Delivery Services Global Delivery Services refers to EY's worldwide network of service delivery centers. The GDS team plays an important role in EY’s strategy by ensuring effective support to EY’s growth agenda. Our journey started in 2002 with approximately 200 people. Today we stand at 80,000+ professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom. Client service is focused on providing Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service. Enablement Services provides cost-effective, high-skilled, and innovative services to support EY’s global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services. Our innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation.   The Opportunity We’re looking for consultants in the cyber security team to work on various Identity and Access Management projects for our customers across the globe. Also, the professional shall need to report any identified risks within engagements and share any issues and updates with the leadership/management on a timely basis In line with EY’s commitment to quality, you’ll confirm that work is of the highest quality as per EY’s quality standards and is reviewed by the next-level reviewer. As an influential member of the team, you’ll help to create a positive learning culture, coach and counsel junior team members and help them to develop.   As a member of the Identity and Access Management (IAM) team this position will contribute towards execution of an IAM roadmap that meets security requirements, implementation and adoption of secrets management, management of machine identities and definition of access policies that meet their needs and are in line with overall IAM Program.   Your key responsibilities   Engage and contribute to the Identity & Access Management projects Work effectively as a team member, sharing responsibility, providing support, maintaining communication, and updating senior team members on progress Administer and support enterprise Okta environments across production, non-production, and disaster recovery tenants. Design, review, test, and implement Okta policies (Global Session Policies, Application Sign-in policies, authenticator enrollment policies etc.,) Engineer secure authentication experience using SSO, MFA, passwordless and phishing-resistant authenticators, while balancing security, user experience, and business continuity, Configure and troubleshoot application integrations using SAML 2.0, OIDC/Oauth 2.0, SWA, WS-Federation, and SCIM, including claims, assignments, provisioning, and deprovisioning. Develop and maintain Okta workflows and API-based automations for identity operations, policy administration, notifications, reporting, and bulk changes. Monitor authentication health and security events using Okta system lo and Splunk dashboards/alerts. Analyse trends, investigate anomalies, and recommend threshold or control improvements. Provide operational support for authentication incidents and service requests, preform root cause analysis, coordinate vendor support, and document resolution and closure evidence. Plan and execute controlled IAM changes, including impact analysis, implementation steps, risk assessment, test cases, success criteria, communications, rollback plans, and post change validations. Maintain technical documentation, knowledge articles, runbooks, implementation plans, architecture notes, and support procedures in approved enterprise repositories. Create and manage Jira stories and sprint deliverables, estimate work, track dependencies, communicate progress, and support Agile ceremonies. Collaborate with IAM engineering, IAM operations, application owners, directory services, service desk, security operations, infrastructure teams, change management, and product vendors. Contribute to knowledge transfer, onboarding, peer reviews, mentoring, and continuous improvement of team standards and operating procedures. Execute the engagement requirements, along with review of work by junior team members Help prepare reports and schedules that will be delivered to clients and other interested parties Develop and maintain productive working relationships with client personnel Build strong internal relationships within EY Consulting Services and with other services across the organization Help senior team members in performance reviews and contribute to performance feedback for staff/junior level team members Contribute to people related initiatives including recruiting and retaining IAM professionals Understand and follow workplace policies and procedures Manage the performance management for the direct reportees, as per the organization policies Foster teamwork and lead by example Participating in the organization-wide people initiatives   Skills and attributes for success   Strong hands-on experience in okta administration, with the ability to translate business and security requirements into supportable technical configurations. Deep understanding of authentication and authorization concepts, including SSO, MFA, passwordless authentication, phishing resistance, session management, and adaptive or risk-based access. Practical experience with Okta policies, rules, groups, profile mappings, authenticators, application assignments, directory integrations, user lifecycle management, and role-based administration. Working knowledge of SAML 2.0, Oauth 2.0, OpenID Connect (OIDC), SWA, WS-Federation, SCIM, REST APIs, JSON, XML, and HTTP concepts. Experience in designing, testing, and troubleshooting provisioning and deprovisioning flows, group-based access, profile sourcing, attribute mappings, and downstream application behavior. Ability to use Splunk and Okta system log for operational monitoring, alert analysis, incident investigation, change validation, and audit evidence. Understanding of access-control models such as RBAC and ABAC, least privilege, privileged access, break-glass access, identity governance, and security control design. Good understanding of Access Management, Workforce and CIAM solutions. Strong Understanding of Okta API’s and good understanding of XML, HTML, CSS. Should be capable of dissecting large problems and designing modular, scalable solutions. Knowledge on FIDO, OAuth, Open ID connect and REST Concepts. Hands-on experien