{"id":1218562,"url":"https://alion.io/job/ey-application-engineer-iii-es-and-f33-p","title":"Application Engineer - III-ES and F33-P","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Industrial Engineering","role_family":"Industrial Engineering","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Hyderabad, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"Confluence","optional":false},{"name":"Git","optional":false},{"name":"IAM","optional":false},{"name":"Java","optional":false},{"name":"Jira","optional":false},{"name":"LDAP","optional":false},{"name":"Least Privilege","optional":false},{"name":"Okta","optional":false},{"name":"Postman","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"Service Desk","optional":false},{"name":"ServiceNow","optional":false},{"name":"Splunk","optional":false}],"status":"live","first_seen_at":"2026-09-25T11:27:52Z","employer_posted_date":"2026-09-25","last_verified_at":"2026-11-01T00:54:50Z","board_verified":true,"closed_at":null,"days_open":36,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":36},"description":"At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nEY-Cyber Security-IAM- Consulting- Risk\nAt EY, we’re all in to shape your future with confidence.\nWe’ll help you succeed in a globally connected powerhouse of diverse teams and take your career wherever you want it to go.\nJoin EY and help to build a better working world.\nAbout Global Delivery Services\nGlobal Delivery Services refers to EY's worldwide network of service delivery centers. The GDS team plays an important role in EY’s strategy by ensuring effective support to EY’s growth agenda.\nOur journey started in 2002 with approximately 200 people. Today we stand at 80,000+ professionals in ten locations around the world. We operate in Argentina, China, Hungary, India, Philippines, Poland, Sri Lanka, Mexico, Spain and the United Kingdom.\nClient service is focused on providing Consulting, Assurance, Tax, Strategy & Transactions, and Knowledge support to our clients around the world. The teams enable account teams worldwide to provide seamless, high-quality, value-added support, helping deliver exceptional client service.\nEnablement Services provides cost-effective, high-skilled, and innovative services to support EY’s global and local enablement teams. Markets, BMC, AWS, Finance and Accounting, Risk Management, Procurement, People Shared Services, IT Service Delivery and IT Global Infrastructure services, are among the services offered by Enablement Services.\nOur innovation specialists serve the GDS Client Service and Enablement Services teams, along with Service Lines, Core Business Services and Sectors. The team brings the desired environment, technologies and skilled teams together for facilitation, rapid prototyping and innovative thinking. The competencies offered include analytics, digital, user experience, mobile technology, infrastructure, Microsoft technologies and open innovation.\nThe Opportunity\nWe’re looking for consultants in the cyber security team to work on various Identity and Access Management projects for our customers across the globe. Also, the professional shall need to report any identified risks within engagements and share any issues and updates with the leadership/management on a timely basis\nIn line with EY’s commitment to quality, you’ll confirm that work is of the highest quality as per EY’s quality standards and is reviewed by the next-level reviewer. As an influential member of the team, you’ll help to create a positive learning culture, coach and counsel junior team members and help them to develop.\nAs a member of the Identity and Access Management (IAM) team this position will contribute towards execution of an IAM roadmap that meets security requirements, implementation and adoption of secrets management, management of machine identities and definition of access policies that meet their needs and are in line with overall IAM Program.\nYour key responsibilities\nEngage and contribute to the Identity & Access Management projects\nWork effectively as a team member, sharing responsibility, providing support, maintaining communication, and updating senior team members on progress\nAdminister and support enterprise Okta environments across production, non-production, and disaster recovery tenants.\nDesign, review, test, and implement Okta policies (Global Session Policies, Application Sign-in policies, authenticator enrollment policies etc.,)\nEngineer secure authentication experience using SSO, MFA, passwordless and phishing-resistant authenticators, while balancing security, user experience, and business continuity,\nConfigure and troubleshoot application integrations using SAML 2.0, OIDC/Oauth 2.0, SWA, WS-Federation, and SCIM, including claims, assignments, provisioning, and deprovisioning.\nDevelop and maintain Okta workflows and API-based automations for identity operations, policy administration, notifications, reporting, and bulk changes.\nMonitor authentication health and security events using Okta system lo and Splunk dashboards/alerts. Analyse trends, investigate anomalies, and recommend threshold or control improvements.\nProvide operational support for authentication incidents and service requests, preform root cause analysis, coordinate vendor support, and document resolution and closure evidence.\nPlan and execute controlled IAM changes, including impact analysis, implementation steps, risk assessment, test cases, success criteria, communications, rollback plans, and post change validations.\nMaintain technical documentation, knowledge articles, runbooks, implementation plans, architecture notes, and support procedures in approved enterprise repositories.\nCreate and manage Jira stories and sprint deliverables, estimate work, track dependencies, communicate progress, and support Agile ceremonies.\nCollaborate with IAM engineering, IAM operations, application owners, directory services, service desk, security operations, infrastructure teams, change management, and product vendors.\nContribute to knowledge transfer, onboarding, peer reviews, mentoring, and continuous improvement of team standards and operating procedures.\nExecute the engagement requirements, along with review of work by junior team members\nHelp prepare reports and schedules that will be delivered to clients and other interested parties\nDevelop and maintain productive working relationships with client personnel\nBuild strong internal relationships within EY Consulting Services and with other services across the organization\nHelp senior team members in performance reviews and contribute to performance feedback for staff/junior level team members\nContribute to people related initiatives including recruiting and retaining IAM professionals\nUnderstand and follow workplace policies and procedures\nManage the performance management for the direct reportees, as per the organization policies\nFoster teamwork and lead by example\nParticipating in the organization-wide people initiatives\nSkills and attributes for success\nStrong hands-on experience in okta administration, with the ability to translate business and security requirements into supportable technical configurations.\nDeep understanding of authentication and authorization concepts, including SSO, MFA, passwordless authentication, phishing resistance, session management, and adaptive or risk-based access.\nPractical experience with Okta policies, rules, groups, profile mappings, authenticators, application assignments, directory integrations, user lifecycle management, and role-based administration.\nWorking knowledge of SAML 2.0, Oauth 2.0, OpenID Connect (OIDC), SWA, WS-Federation, SCIM, REST APIs, JSON, XML, and HTTP concepts.\nExperience in designing, testing, and troubleshooting provisioning and deprovisioning flows, group-based access, profile sourcing, attribute mappings, and downstream application behavior.\nAbility to use Splunk and Okta system log for operational monitoring, alert analysis, incident investigation, change validation, and audit evidence.\nUnderstanding of access-control models such as RBAC and ABAC, least privilege, privileged access, break-glass access, identity governance, and security control design.\nGood understanding of Access Management, Workforce and CIAM solutions.\nStrong Understanding of Okta API’s and good understanding of XML, HTML, CSS.\nShould be capable of dissecting large problems and designing modular, scalable solutions.\nKnowledge on FIDO, OAuth, Open ID connect and REST Concepts.\nHands-on experience in setting up the Identity and Access Management environment in standalone and cluster environment.\nHands-on experience on configuring the tool as per the requirements.\nHands-on experience on Directory level integration with Okta for AD, LDAP, Azure AD, Oracle AD.\nGood Understanding on IWA and Okta Workflows.\nHands-on experience on Okta APIs.\nShould be knowledge on Okta Access Gateway, Okta Advance Server Access and SCIM.\nDefine and set up approach for risk-based MFA and applications access control.\nHands-on experience on security related assessments and configuration for AM platforms, adaptive risk configurations and Multi-factor authentications.\nCapability of understanding the business requirements and converting that into design.\nAbility to perform risk assessment and threat modelling exercises with technology engineering teams.\nShould be flexible to work on new technologies in IAM domain.\nWorked in client facing role.\nExperience with ServiceNow, JIRA, Confluence, Bruno or Postman, Git-based version control, and enterprise change management processes.\nNeed to be thorough in their respective tool with hands-on experience involving configuration, implementation & customization.\nHands-on Java/Python development and debugging experience.\nUse case design, Solution Requirements Specification and mapping business requirements to technical requirements (Traceability Matrix).\nInvolvement in a successful pursuit of a potential client by being part of the RFP response team.\nTo qualify for the role, you must have\nB. Tech./ B.E. with sound technical skills\n5-9 Years’ Work Experience in Identity and Access Management\nExperience implementing or supporting SSO, MFA, directory integrations, federation, lifecycle management, and application onboarding.\nStrong command on verbal and written English language.\nExperience Access Management tools such as Okta, PingFed\nStrong interpersonal and presentation skills.\nAbility to participate in client-facing discussions and work effectively across on-site and offshore delivery models.\nCertification:\nOkta certifications such as Okta Certified Professional, Administrator, Consultant, Developer, Workflows speciality.\nSecurity certifications such as CISSP, CISA, or an equivalent IAM/security certification.\nWhat we look for\nWho has hands on experience in setting up the Identity and Access Management environment in standalone and cluster environment.\nWho has hands-on Development experience on Application and Directory Integration, User Provisioning, Okta Workflows, triggers, Rules and customizing the tool as per the requirements.\nA structured problem solver who can break down complex authentication issues, validate assumptions with evidence, and drive issues to closure.\nA dependable team member who takes ownership, communicates early, documents clearly, and collaborates effectively across technical and business teams.\nA continuous learner who keeps pace with IAM threats, product changes, modern authentication standards, and automation opportunities.\nWhat we offer you\nAt EY, we’ll develop you with future-focused skills and equip you with world-class experiences. We’ll empower you in a flexible environment, and fuel you and your extraordinary talents in a diverse and inclusive culture of globally connected teams. Learn more.\nAre you ready to shape your future with confidence? Apply today.\nTo help create an equitable and inclusive experience during the recruitment process, please inform us as soon as possible about any disability-related adjustments or accommodations you may need.\nOur Commitment: As a commitment, we persistently endeavour to embody our values, fulfil our purpose, and champion inclusiveness. Our dedication is to cultivate EY into an environment where diverse perspectives are celebrated, creating a supportive atmosphere for individuals to authentically be themselves and contribute their utmost.\nProfessional Development: From entry-level employees to senior leaders, we believe in continuous learning. We offer opportunities to build new skills, take on leadership roles, and connect and grow through mentorship.\nPeople and Culture: In our dynamic workplace, diversity, equity, and inclusiveness are ingrained in our culture. We'r...","description_format":"text","description_chars":13609,"description_truncated":true,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"All levels","optional":false}]},"benefits":["Continuous learning","Equity","Professional development"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Audit & Assurance Firms","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-09-25T11:27:52Z"}],"visa":[],"liveness":{"score":33,"band":"fade","label":"Fading","p_open":1,"p_active":0.744,"p_room":0.45,"age_days":35,"expected_fill_days":22,"reasons":["conf:3","velocity","win:tail","comp:brand"],"computed_at":"2026-10-31T05:58:55Z"},"pay":null,"html_url":"https://alion.io/job/ey-application-engineer-iii-es-and-f33-p","json_url":"https://alion.io/job/ey-application-engineer-iii-es-and-f33-p.json","meta":{"generated_at":"2026-11-01T06:03:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":9457,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-application-engineer-iii-es-and-f33-p"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-application-engineer-iii-es-and-f33-p"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-application-engineer-iii-es-and-f33-p"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-application-engineer-iii-es-and-f33-p\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-application-engineer-iii-es-and-f33-p"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1218562}},{"tool":"search_jobs","arguments":{"company":"ey.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1218562},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}