{"id":2333213,"url":"https://alion.io/job/ey-security-engineer-2","title":"Security Engineer","company":{"id":2859,"name":"EY","domain":"ey.com","url":"https://alion.io/company/ey-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SuccessFactors","truth_index":null},"role":"Security","role_family":"Security","seniority":"junior","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":12000,"max_usd":35000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":477},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"CyberArk","optional":false},{"name":"Docker","optional":false},{"name":"GitHub Actions","optional":false},{"name":"GitLab CI","optional":false},{"name":"IAM","optional":false},{"name":"ITIL","optional":false},{"name":"ITSM","optional":false},{"name":"Jenkins","optional":false},{"name":"Kubernetes","optional":false},{"name":"LDAP","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Okta","optional":false},{"name":"Ping Identity","optional":false},{"name":"PKI","optional":false},{"name":"PowerShell","optional":false},{"name":"Rest API","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-12T09:30:22Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-13T01:42:50Z","board_verified":true,"closed_at":null,"days_open":0,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":0},"description":"At EY, you’ll have the chance to build a career as unique as you are, with the global scale, support, inclusive culture and technology to become the best version of you. And we’re counting on your unique voice and perspective to help EY become even better, too. Join us and build an exceptional experience for yourself, and a better working world for all.\nIAM Secure Access Engineer\nToday’s world is fueled by vast amounts of information. Data is more valuable than ever before. Protecting data and information systems is central to doing business, and everyone in EY Information Security has a critical role to play. Join a global team of professionals who collaborate to support the business by protecting information assets. Our Information Security professionals enable the organization to work securely and deliver secure products and services, as well as detect and respond to security events as they happen.\nWithin Information Security, we blend risk strategy, digital identity, cyber defense, application security and technology solutions across the security lifecycle. You will join a team of security-focused professionals dedicated to supporting, protecting and enabling the business through innovative and secure solutions that provide business value.\nThe opportunity\nAs part of the Identity and Access Management organization, the IAM Secure Access Engineer will design, configure, test and implement authentication, federation and authorization capabilities across enterprise, cloud and hybrid environments.\nThe role combines traditional IAM engineering fundamentals with delivery of new Secure Access initiatives across Microsoft Entra ID, Conditional Access, PingID, PingFederate, PingAccess, Okta, PlainID, multifactor authentication, passwordless authentication, workload identities, token protection and secrets or certificate-based authentication.\nThe engineer will work with Architecture, Product, Operations, application teams and vendors to translate requirements into secure, supportable solutions and move changes through design, build, test, production deployment and operational handover.\nYour key responsibilities\nAuthentication, Federation & Access Engineering\nDesign, configure and support authentication and federation integrations using SAML 2.0, OAuth 2.0, OpenID Connect and related standards.\nImplement and maintain MFA, single sign-on, passwordless authentication and risk-based access controls.\nConfigure and troubleshoot PingID, PingFederate, PingAccess, Okta and Microsoft Entra ID integrations.\nSupport onboarding and migration of applications to modern authentication patterns.\nAnalyze authentication failures, policy conflicts, token issues and user access problems across integrated platforms.\nConditional Access & Identity Protection\nImplement and enhance Microsoft Entra Conditional Access policies, authentication strengths, authentication contexts and protected actions.\nSupport Continuous Access Evaluation, token protection, sign-in risk controls and secure administrative access patterns.\nAssess policy impact, exclusions, break-glass requirements and deployment risks before production release.\nUse logs and platform telemetry to validate control effectiveness and investigate access issues.\nAuthorization, Workload Identity & Secrets\nImplement policy-based authorization using PlainID or comparable authorization platforms.\nSupport role-based, attribute-based and policy-based access control patterns.\nImprove security for service principals, managed identities, application identities and other non-human identities.\nSupport migration from shared secrets to managed identity, certificates or approved vault-based patterns.\nCoordinate certificate, key and secret lifecycle activities with PKI, vault and application teams.\nEngineering Delivery & Operations\nCreate technical designs, implementation plans, test cases, rollback plans and operational documentation.\nRaise and manage Change Requests and support production deployments through established controls.\nAutomate repeatable administration and validation tasks using PowerShell, REST APIs or other approved scripting methods.\nPerform unit, integration, regression and security testing and support post-deployment validation.\nParticipate in incident, problem, vulnerability remediation and continual improvement activities.\nSkills and attributes for success\nSolid understanding of authentication, authorization, identity federation, MFA, SSO and Zero Trust principles.\nHands-on experience with at least two of the following: Microsoft Entra ID, PingID, PingFederate, PingAccess, Okta or PlainID.\nWorking knowledge of SAML, OAuth 2.0, OpenID Connect, JWT, SCIM, LDAP, Kerberos and RADIUS.\nExperience with Conditional Access, Identity Protection, workload identities or modern authentication controls.\nPowerShell or comparable scripting experience and the ability to work with REST APIs, JSON and certificates.\nStrong troubleshooting, documentation, testing and stakeholder communication skills.\nUnderstanding of secure software delivery, ITSM, Change Management and production support practices.\nTo qualify for the role you must have\nDegree in Computer Science, Information Technology, Cybersecurity or a related discipline, or equivalent practical experience.\n2 to 5 years of experience in IAM, authentication engineering, access management, security engineering or enterprise platform support.\nFamiliarity with CI/CD tools such as Azure DevOps, GitHub Actions, Jenkins, or GitLab CI/CD.\nExperience creating deployment pipelines and release automation.\nBasic containerization knowledge (Docker/Kubernetes preferred).\nExperience configuring or supporting enterprise authentication and access management solutions.\nExperience delivering controlled changes across development, test and production environments.\nAbility to analyze technical issues, document findings and work effectively with distributed teams.\nIdeally, you’ll also have\nExperience with Microsoft Entra Conditional Access, Ping Identity products, Okta or PlainID.\nKnowledge of passwordless authentication, FIDO2, certificate-based authentication and PKI.\nExperience with CyberArk, Azure Key Vault or another enterprise secrets platform.\nCloud platform knowledge in Azure and familiarity with CI/CD or infrastructure automation.\nRelevant Microsoft, Ping Identity, Okta, security or ITIL certification.\nWhat we look for\nWe look for a hands-on engineer who combines sound IAM fundamentals with curiosity about emerging authentication and authorization controls. The successful candidate is structured, security-minded and comfortable collaborating across application, infrastructure, architecture and operations teams.\nWhat we offer\nAs part of this role, you will work in a highly coordinated, globally diverse team with the opportunity and tools to grow, develop and drive your career forward. Here, you can combine global opportunity with flexible working. The benefits package focuses on physical, emotional, financial and social well-being. Your recruiter can explain the benefits available in your country.\nContinuous learning: You will develop the mindset and skills to navigate whatever comes next.\nSuccess as defined by you: We will provide the tools and flexibility so you can make a significant impact, your way.\nTransformative leadership: We will give you the insights, coaching and confidence to be the leader the world needs.\nDiverse and inclusive culture: You will be accepted for who you are and empowered to use your voice to help others find theirs.\nEY | Building a better working world\nEY exists to build a better working world, helping to create long-term value for clients, people and society and build trust in the capital markets.\nEnabled by data and technology, diverse EY teams in over 150 countries provide trust through assurance and help clients grow, transform and operate.\nWorking across assurance, consulting, law, strategy, tax and transactions, EY teams ask better questions to find new answers for the complex issues facing our world today.","description_format":"text","description_chars":8040,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning","Flexible schedule"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Audit & Assurance Firms","Financial Advisory, Valuation & Restructuring","Management Consulting","Tax Advisory & Preparation"],"lifecycle":[{"event":"open","at":"2026-10-12T09:30:22Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":0,"expected_fill_days":13,"reasons":["conf:0","win:early","comp:junior,brand"],"computed_at":"2026-10-13T01:51:32Z"},"pay":null,"html_url":"https://alion.io/job/ey-security-engineer-2","json_url":"https://alion.io/job/ey-security-engineer-2.json","meta":{"generated_at":"2026-10-13T01:51:32Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":2673,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2859},"rest":"https://alion.io/mcp/rest/get_company?id=2859"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fey-security-engineer-2"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fey-security-engineer-2"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fey-security-engineer-2"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ey-security-engineer-2\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fey-security-engineer-2"}]}