IAM - Senior Authentication Engineer

Authentication & SSO Sr. Engineer/Consultant – Job Description

Your Role

Are you looking to work in Cloud based Authentication and Single Sign-On solutions in a global organization? Are you interested in guiding applications to integrate with Central Authentication solutions by leveraging modern authentication protocols?

We’re looking for an Authentication & SSO Engineer/Consultant who will

Guide application teams, product owners and Engineers to identify Authentication pattern for their requirements and assist them to integrate with Central Authentication solutions.

Advise Authentication best practices including but not limited to MFA enforcement, Session Management, Efficient use of Authentication resources

Engineer solutions to meet the business requirement by following Organizational SDLC and Agile practices

Develop processes and controls to improve the operational stability and resiliency of the Cloud based and On-Prem Authentication services

Work with Engineering Manager and broader team to mature the Cloud based and On-Prem Authentication solutions

Implement and manage necessary solutions to monitor the health of the systems

Maintain User documentation for the supported Authentication Pattern and associated Technical & operational documents for systems in-scope.

Act as subject matter expert during Incidents and troubleshoot issues to resolve them in a swift manner

Exhibit leadership skills to guide fellow team members whenever they require assistance.

Your team

You’ll be joining our Global Authentication team, which is part of Global IAM Engineering. This is a global team with Engineers and Consultants that manage Authentication and Single Sign-On solutions for Customer & Agent facing Applications and Enterprise applications at Chubb.

Chubb is the world’s largest publicly traded P&C insurance company and the leading commercial lines insurer in the U.S. With operations in 54 countries and territories, Chubb provides commercial and personal property and casualty insurance, personal accident and supplemental health insurance, reinsurance and life insurance to a diverse group of clients. As an underwriting company, we assess, assume and manage risk with insight and discipline. We service and pay our claims fairly and promptly. We combine the precision of craftsmanship with decades of experience to conceive, craft and deliver the very best insurance coverage and service to individuals and families, and businesses of all sizes.

Your Expertise

Mandatory Skills

10+ years of hands-on experience working with Industry standard Cloud based Authentication Solution (For instance, Azure AD, AzureADB2C, Okta, Ping) in large enterprise organizations, to protect applications and data in cloud and hybrid environments.

Familiar with Modern Authentication protocols – OAuth 2.0, OIDC, SAML, FIDO and industry standard Auth flows (e.g. PKCE, Authorization Code, Client Credentials, etc)

• Experience with implementing Multi Factor Authentication and Risk/Conditional Access.
• Experience in Cloud Authentication Governance and automation of onboarding & maintenance activities
• Working knowledge of PowerShell, Jenkins and other devops tools to automate manual processes.
• Knowledge on Active Directory Sites and services, DNS, DHCP
• Knowledge on Microsoft PKI Technologies
• Knowledge and understanding of Azure App Services, Application Insights, Azure Monitor, API Gateway – APIM, Azure AD App proxy.

Good communication skill.

Nice to have Skills

• Experience with Azure AD and Azure AD B2C is a plus
• Sound knowledge of Microsoft Graph API, MSAL and application integration experience using Java/.Net, Powershell, Javascript, etc.
• Microsoft Azure Certificates is preferred (AZ-500 Microsoft Azure Security Technologies)

Development experience in Web - .NET/Java is a plus

Familiarity with web app security concepts such as – OWASP.