Application Engineer - III-ES and F33-P

At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.

EY-Cyber Security-IAM- Consulting- Risk

At EY, we’re all in to shape your future with confidence.

We’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.

Join EY and help to build a better working world.

About Global Delivery Services

Global Delivery Services refers to EY's worldwide network of service delivery centers. The GDS team plays an important role in EY’s strategy by ensuring effective support to EY’s growth agenda.

Our journey started in 2002 with approximately 200 people. Today we stand at 80,000+ professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom.

Client service is focused on providing Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service.

Enablement Services provides cost-effective, high-skilled, and innovative services to support EY’s global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services.

Our innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation.

The Opportunity

We’re looking for consultants in the cyber security team to work on various Identity and Access Management projects for our customers across the globe. Also, the professional shall need to report any identified risks within engagements and share any issues and updates with the leadership/management on a timely basis

In line with EY’s commitment to quality, you’ll confirm that work is of the highest quality as per EY’s quality standards and is reviewed by the next-level reviewer. As an influential member of the team, you’ll help to create a positive learning culture, coach and counsel junior team members and help them to develop.

As a member of the Identity and Access Management (IAM) team this position will contribute towards execution of an IAM roadmap that meets security requirements, implementation and adoption of secrets management, management of machine identities and definition of access policies that meet their needs and are in line with overall IAM Program.

Your key responsibilities

• Engage and contribute to the Identity & Access Management projects
• Work effectively as a team member, sharing responsibility, providing support, maintaining communication, and updating senior team members on progress
• Administer and support enterprise Okta environments across production, non-production, and disaster recovery tenants.
• Design, review, test, and implement Okta policies (Global Session Policies, Application Sign-in policies, authenticator enrollment policies etc.,)
• Engineer secure authentication experience using SSO, MFA, passwordless and phishing-resistant authenticators, while balancing security, user experience, and business continuity,
• Configure and troubleshoot application integrations using SAML 2.0, OIDC/Oauth 2.0, SWA, WS-Federation, and SCIM, including claims, assignments, provisioning, and deprovisioning.
• Develop and maintain Okta workflows and API-based automations for identity operations, policy administration, notifications, reporting, and bulk changes.
• Monitor authentication health and security events using Okta system lo and Splunk dashboards/alerts. Analyse trends, investigate anomalies, and recommend threshold or control improvements.
• Provide operational support for authentication incidents and service requests, preform root cause analysis, coordinate vendor support, and document resolution and closure evidence.
• Plan and execute controlled IAM changes, including impact analysis, implementation steps, risk assessment, test cases, success criteria, communications, rollback plans, and post change validations.
• Maintain technical documentation, knowledge articles, runbooks, implementation plans, architecture notes, and support procedures in approved enterprise repositories.
• Create and manage Jira stories and sprint deliverables, estimate work, track dependencies, communicate progress, and support Agile ceremonies.
• Collaborate with IAM engineering, IAM operations, application owners, directory services, service desk, security operations, infrastructure teams, change management, and product vendors.
• Contribute to knowledge transfer, onboarding, peer reviews, mentoring, and continuous improvement of team standards and operating procedures.
• Execute the engagement requirements, along with review of work by junior team members
• Help prepare reports and schedules that will be delivered to clients and other interested parties
• Develop and maintain productive working relationships with client personnel
• Build strong internal relationships within EY Consulting Services and with other services across the organization
• Help senior team members in performance reviews and contribute to performance feedback for staff/junior level team members
• Contribute to people related initiatives including recruiting and retaining IAM professionals
• Understand and follow workplace policies and procedures
• Manage the performance management for the direct reportees, as per the organization policies
• Foster teamwork and lead by example
• Participating in the organization-wide people initiatives

Skills and attributes for success

• Strong hands-on experience in okta administration, with the ability to translate business and security requirements into supportable technical configurations.
• Deep understanding of authentication and authorization concepts, including SSO, MFA, passwordless authentication, phishing resistance, session management, and adaptive or risk-based access.
• Practical experience with Okta policies, rules, groups, profile mappings, authenticators, application assignments, directory integrations, user lifecycle management, and role-based administration.
• Working knowledge of SAML 2.0, Oauth 2.0, OpenID Connect (OIDC), SWA, WS-Federation, SCIM, REST APIs, JSON, XML, and HTTP concepts.
• Experience in designing, testing, and troubleshooting provisioning and deprovisioning flows, group-based access, profile sourcing, attribute mappings, and downstream application behavior.
• Ability to use Splunk and Okta system log for operational monitoring, alert analysis, incident investigation, change validation, and audit evidence.
• Understanding of access-control models such as RBAC and ABAC, least privilege, privileged access, break-glass access, identity governance, and security control design.
• Good understanding of Access Management, Workforce and CIAM solutions.
• Strong Understanding of Okta API’s and good understanding of XML, HTML, CSS.
• Should be capable of dissecting large problems and designing modular, scalable solutions.
• Knowledge on FIDO, OAuth, Open ID connect and REST Concepts.
• Hands-on experience in setting up the Identity and Access Management environment in standalone and cluster environment.
• Hands-on experience on configuring the tool as per the requirements.
• Hands-on experience on Directory level integration with Okta for AD, LDAP, Azure AD, Oracle AD.
• Good Understanding on IWA and Okta Workflows.
• Hands-on experience on Okta APIs.
• Should be knowledge on Okta Access Gateway, Okta Advance Server Access and SCIM.
• Define and set up approach for risk-based MFA and applications access control.
• Hands-on experience on security related assessments and configuration for AM platforms, adaptive risk configurations and Multi-factor authentications.
• Capability of understanding the business requirements and converting that into design.
• Ability to perform risk assessment and threat modelling exercises with technology engineering teams.
• Should be flexible to work on new technologies in IAM domain.
• Worked in client facing role.
• Experience with ServiceNow, JIRA, Confluence, Bruno or Postman, Git-based version control, and enterprise change management processes.
• Need to be thorough in their respective tool with hands-on experience involving configuration, implementation & customization.
• Hands-on Java/Python development and debugging experience.
• Use case design, Solution Requirements Specification and mapping business requirements to technical requirements (Traceability Matrix).
• Involvement in a successful pursuit of a potential client by being part of the RFP response team.

To qualify for the role, you must have

• B. Tech./ B.E. with sound technical skills
• 5-9 Years’ Work Experience in Identity and Access Management
• Experience implementing or supporting SSO, MFA, directory integrations, federation, lifecycle management, and application onboarding.
• Strong command on verbal and written English language.
• Experience Access Management tools such as Okta, PingFed
• Strong interpersonal and presentation skills.
• Ability to participate in client-facing discussions and work effectively across on-site and offshore delivery models.

Certification:

• Okta certifications such as Okta Certified Professional, Administrator, Consultant, Developer, Workflows speciality.
• Security certifications such as CISSP, CISA, or an equivalent IAM/security certification.

What we look for

• Who has hands on experience in setting up the Identity and Access Management environment in standalone and cluster environment.
• Who has hands-on Development experience on Application and Directory Integration, User Provisioning, Okta Workflows, triggers, Rules and customizing the tool as per the requirements.
• A structured problem solver who can break down complex authentication issues, validate assumptions with evidence, and drive issues to closure.
• A dependable team member who takes ownership, communicates early, documents clearly, and collaborates effectively across technical and business teams.
• A continuous learner who keeps pace with IAM threats, product changes, modern authentication standards, and automation opportunities.

What we offer you

At EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.

Are you ready to shape your future with confidence? Apply today.

To help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.

Our Commitment: As a commitment, we persistently endeavour to embody our values, fulfil our purpose, and champion inclusiveness. Our dedication is to cultivate EY into an environment where diverse perspectives are celebrated, creating a supportive atmosphere for individuals to authentically be themselves and contribute their utmost.

Professional Development: From entry-level employees to senior leaders, we believe in continuous learning. We offer opportunities to build new skills, take on leadership roles, and connect and grow through mentorship.

People and Culture: In our dynamic workplace, diversity, equity, and inclusiveness are ingrained in our culture. We're united by a commitment to create an environment where every individual's differences are valued, practices are equitable, fostering a sense of belonging. Our shared values include integrity, respect, teaming, inclusiveness, energy, enthusiasm, courage to lead, and building relationships based on doing the right thing.

Benefits: Embark on a transformative career journey with us and indulge in a suite of premium benefits, encompassing exclusive health and wellness packages, enticing rewards, and cutting-edge learning opportunities that empower you to continually grow and excel in your professional and personal development.

How to Apply: If you are passionate to join us and are aligned with our commitment to building a better working world, we invite you to apply by completing our user-friendly form with personal and professional information and by providing your consent to data privacy.

Successful candidates advance to a competency-based interview. If mutual interest persists, a job offer awaits.

“We are an equal opportunity employer and are committed to Diversity, Equity & Inclusion”.

EY | Building a better working world

EY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.

Enabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.

Working across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.