Info Security Analyst
Posted Updated
Description
The Senior information Security Specialist, Authentication
services is responsible for the design, implementation, and operation of
secure, scalable authentication and identity solutions across the enterprise.
This role ensures seamless access to applications while maintaining strong
security controls aligned with industry best practices and organizational
standards.
- Design, implement, and support enterprise
authentication solutions, including Single Sign-On (SSO) and Multi-Factor
Authentication (MFA).
- Develop, implement, and manage Conditional Access
policies to enforce risk-based access controls, device compliance, user
context, and location-based restrictions.
- Manage and optimize identity platforms such as Azure
AD, AWS IAM, and GCP IAM.
- Integrate applications using modern authentication
protocols including SAML, OAuth, OpenID Connect (OIDC), and SCIM.
- Collaborate with application teams to onboard and
secure enterprise applications.
- Ensure authentication services align with cybersecurity
frameworks (e.g., ISO 27001, NIST).
- Troubleshoot and resolve authentication and
access-related issues.
- Maintain documentation, standards, and operational
procedures for authentication services.
- Contribute to strategic IAM initiatives and continuous
improvement efforts.
Experience:
- At least 5 years of hands-on experience with
authentication solutions such as Azure SSO, MFA, and IAM in AWS and GCP.
- Minimum of 3 years implementing and managing
enterprise-level SSO and MFA for applications.
- Experience working with modern authentication protocols
and standards, including SAML, OIDC, OAuth, and SCIM.
Skills:
- Excellent communication, negotiation, and interpersonal
skills, with experience working in diverse teams within a large enterprise
environment.
- Strong attention to detail, effective planning skills,
and a proactive, self-motivated approach. Ability to analyze problems,
think critically, and influence others.
- Solid understanding of Identity and Access Management
(IAM) principles, including directory and authentication services.
Certifications/Education:
- Bachelor’s degree (or equivalent) in Computer Science,
Information Technology, Engineering, or a related field.
- Microsoft Certified: Identity and Access Administrator
Associate certification is an asset.
- Basic knowledge of cybersecurity frameworks such as ISO
27001 or NIST.