Analyst - IAM SSO Engineer

PepsiCo · Hyderabad

Apply on the company website

The Identity and Access Management (IAM) Engineer will be a mid-level technical resource responsible for implementing, integrating, and supporting authentication solutions across on-premises and cloud environments. This role requires strong hands-on experience with SSO, MFA, application integrations, infrastructure components, cloud platforms, and scripting to support secure and reliable authentication services.

The ideal candidate is hands-on, technically strong, and able to troubleshoot complex authentication, integration, and infrastructure issues with limited guidance.

This role is based out of Hyderabad, India and requires coming into the office.

• Implement and support authentication solutions across SSO, MFA, and identity federation use cases.
• Ensure seamless user authentication experiences across applications and platforms.
• Configure and integrate applications with IAM platforms such as Okta, Auth0, PingFederate, or similar access management tools.
• Support authentication capabilities such as user registration, self-service, authentication, authorization, administration, audit, and reporting.
• Integrate applications using modern protocols such as SAML, OAuth 2.0, OIDC, and header-based authentication.
• Support IAM platform improvements that align with security, infrastructure, and business requirements.
• Identify opportunities for improving the SSO/Okta environment and implement enhancements.
• Work with application, infrastructure, cloud, security, and development teams to gather requirements and implement effective authentication solutions.
• Configure access policies, sign-on policies, MFA rules, and risk-based authentication controls based on business and security requirements.
• Collaborate with stakeholders to define and maintain authentication standards.
• Conduct regular system audits to ensure performance and compliance with security standards.
• Knowledge of regulatory compliance standards and experience with audit support activities.
• Partner with Cybersecurity, API, application, and infrastructure teams to document authentication patterns, integration standards, and troubleshooting steps.
• Stay current with emerging security threats, technologies, and industry trends to continuously improve the security posture.
• Assesses current applications and architecture to ensure current implementations align with industry guidelines, best practices and management approved standards.
• Develop and maintain scripts or automation to simplify IAM operations, reporting, monitoring, and integration support activities.
• Provide advanced production support to diagnose and resolve authentication, SSO, MFA, integration, agent, network, and infrastructure-related issues.
• Participate in incident response and security incident investigations related to IAM systems.
• Develop and deliver applicable documentation, training, and knowledge transfer to both internal and external stakeholders.
• Evaluate and hands on implement automation capabilities to simplify processes and deliver value/cost savings to the business.
• Foster the Agile DevOps culture through the latest toolset to improve customer satisfaction through rapid, continuous delivery.

Minimum Qualifications:

• 6+ years of overall IT experience
• 4+ years of hands-on experience supporting authentication, SSO, MFA, or access management solutions
• 4+ years of hands-on experience with Okta, Auth0, PingFederate, Azure AD/Entra ID, or comparable access management tools
• 3+ years of scripting or automation experience using PowerShell, Python, JavaScript, REST APIs, or similar technologies
• Working knowledge of infrastructure, networking, cloud, and DevOps concepts used to support authentication platforms
• Okta Certified Administrator or equivalent IAM certification preferred
• BS/BA degree or equivalent experience
• Security, cloud, or CIAM certifications are a plus
• Experience with CIC/Auth0 platform is a plus.

Preferred Qualifications:

• Proven track record in implementing IAM solutions in a large, complex environment.
•  Strong understanding of federated authentication, SSO, and SAML along with the ability to make recommendations, scope, and execute on opportunities for automation or improvement in identity system architecture.
• Hands-on experience implementing authentication services in enterprise environments.
• Experience supporting IAM or CIAM implementation activities, including requirements review, configuration, testing, and deployment.
• Proven track record of understanding B2B and B2C customer needs and delivering solutions that enhance user experience while maintaining security and compliance standards.
• Thorough understanding of security best practices, privacy regulations (such as GDPR, CCPA), and compliance requirements related to customer data protection.
• Broader IAM domain experience with focus on information security
• Deep technical expertise in solutioning and integrating B2B, B2C applications with CIAM.
• Strong working knowledge of IAM platforms such as Okta, PingFederate, Auth0, Azure AD/Entra ID, or similar tools used to enable SSO for cloud and on-premises applications.
• Hands-on experience building SSO integrations using SAML, OAuth 2.0, OIDC, header-based authentication, and federation patterns.
• Experience in designing Consumer identity and access management solutions
• Strong understanding of the latest security principles like zero trust and passwordless authentication to implement new standards in the authentication model.
• Must have working knowledge of Okta Lifecycle Management and Administrative APIs
• Experience with solutions like CyberArk, Beyond Trust, RSA or comparable products.
• Excellent understanding of REST integration concepts
• Experience in directory services like Oracle LDAP, and AD
• Experience supporting authentication services in cloud environments such as AWS, Azure, or hybrid infrastructure.
• Hands-on scripting or development experience using JavaScript, Python, PowerShell, Java, Node.js, REST APIs, or similar technologies.
• Hands on experience with JavaScript, Python, Ruby, PowerShell, or other scripting languages preferred.
• Exposure to CI/CD pipelines and deployment automation in Azure or AWS.
• Experience with automation tools such as Ansible, Terraform, or similar infrastructure-as-code tools is preferred.
• Experience in Monitoring tools like Splunk, ELK, Prometheus, or similar tools
• Experience with container technologies Docker, Kubernetes
• Experience with Linux and Windows platforms, middleware, web servers, load balancers, agents, certificates, and network troubleshooting. 
• Experience developing workflows, custom connectors, and troubleshooting complex issues.  
• Experience with Agile and DevOps tools and methodologies
• Minimum Okta Certified Administrator: Okta Certified Consultant and/or Okta Certified Developer preferred.
• CISSP / CIAM Certification is a plus.
• Experience in Auth0 and SiteMinder is preferred.

Non-Technical skills:

• Exceptional communication and interpersonal skills with the ability to influence and collaborate with diverse stakeholders.
•  Deliver outcomes with a little supervision, must be a self-starter and self-motivator.
• Strong analytical, problem-solving, and decision-making skills, with the ability to manage complex and competing priorities.
•  Strong project management and organizational skills, with the ability to deliver high-quality results.
• Ability to think strategically and suggest creative solutions.
• Ability to synthesize complex requirements into simple business practices.
• Flexible and able to adapt to changing priorities.

• Implement and support authentication solutions across SSO, MFA, and identity federation use cases.
• Ensure seamless user authentication experiences across applications and platforms.
• Configure and integrate applications with IAM platforms such as Okta, Auth0, PingFederate, or similar access management tools.
• Support authentication capabilities such as user registration, self-service, authentication, authorization, administration, audit, and reporting.
• Integrate applications using modern protocols such as SAML, OAuth 2.0, OIDC, and header-based authentication.
• Support IAM platform improvements that align with security, infrastructure, and business requirements.
• Identify opportunities for improving the SSO/Okta environment and implement enhancements.
• Work with application, infrastructure, cloud, security, and development teams to gather requirements and implement effective authentication solutions.
• Configure access policies, sign-on policies, MFA rules, and risk-based authentication controls based on business and security requirements.
• Collaborate with stakeholders to define and maintain authentication standards.
• Conduct regular system audits to ensure performance and compliance with security standards.
• Knowledge of regulatory compliance standards and experience with audit support activities.
• Partner with Cybersecurity, API, application, and infrastructure teams to document authentication patterns, integration standards, and troubleshooting steps.
• Stay current with emerging security threats, technologies, and industry trends to continuously improve the security posture.
• Assesses current applications and architecture to ensure current implementations align with industry guidelines, best practices and management approved standards.
• Develop and maintain scripts or automation to simplify IAM operations, reporting, monitoring, and integration support activities.
• Provide advanced production support to diagnose and resolve authentication, SSO, MFA, integration, agent, network, and infrastructure-related issues.
• Participate in incident response and security incident investigations related to IAM systems.
• Develop and deliver applicable documentation, training, and knowledge transfer to both internal and external stakeholders.
• Evaluate and hands on implement automation capabilities to simplify processes and deliver value/cost savings to the business.
• Foster the Agile DevOps culture through the latest toolset to improve customer satisfaction through rapid, continuous delivery.

Minimum Qualifications:

• 6+ years of overall IT experience
• 4+ years of hands-on experience supporting authentication, SSO, MFA, or access management solutions
• 4+ years of hands-on experience with Okta, Auth0, PingFederate, Azure AD/Entra ID, or comparable access management tools
• 3+ years of scripting or automation experience using PowerShell, Python, JavaScript, REST APIs, or similar technologies
• Working knowledge of infrastructure, networking, cloud, and DevOps concepts used to support authentication platforms
• Okta Certified Administrator or equivalent IAM certification preferred
• BS/BA degree or equivalent experience
• Security, cloud, or CIAM certifications are a plus
• Experience with CIC/Auth0 platform is a plus.

Preferred Qualifications:

• Proven track record in implementing IAM solutions in a large, complex environment.
•  Strong understanding of federated authentication, SSO, and SAML along with the ability to make recommendations, scope, and execute on opportunities for automation or improvement in identity system architecture.
• Hands-on experience implementing authentication services in enterprise environments.
• Experience supporting IAM or CIAM implementation activities, including requirements review, configuration, testing, and deployment.
• Proven track record of understanding B2B and B2C customer needs and delivering solutions that enhance user experience while maintaining security and compliance standards.
• Thorough understanding of security best practices, privacy regulations (such as GDPR, CCPA), and compliance requirements related to customer data protection.
• Broader IAM domain experience with focus on information security
• Deep technical expertise in solutioning and integrating B2B, B2C applications with CIAM.
• Strong working knowledge of IAM platforms such as Okta, PingFederate, Auth0, Azure AD/Entra ID, or similar tools used to enable SSO for cloud and on-premises applications.
• Hands-on experience building SSO integrations using SAML, OAuth 2.0, OIDC, header-based authentication, and federation patterns.
• Experience in designing Consumer identity and access management solutions
• Strong understanding of the latest security principles like zero trust and passwordless authentication to implement new standards in the authentication model.
• Must have working knowledge of Okta Lifecycle Management and Administrative APIs
• Experience with solutions like CyberArk, Beyond Trust, RSA or comparable products.
• Excellent understanding of REST integration concepts
• Experience in directory services like Oracle LDAP, and AD
• Experience supporting authentication services in cloud environments such as AWS, Azure, or hybrid infrastructure.
• Hands-on scripting or development experience using JavaScript, Python, PowerShell, Java, Node.js, REST APIs, or similar technologies.
• Hands on experience with JavaScript, Python, Ruby, PowerShell, or other scripting languages preferred.
• Exposure to CI/CD pipelines and deployment automation in Azure or AWS.
• Experience with automation tools such as Ansible, Terraform, or similar infrastructure-as-code tools is preferred.
• Experience in Monitoring tools like Splunk, ELK, Prometheus, or similar tools
• Experience with container technologies Docker, Kubernetes
• Experience with Linux and Windows platforms, middleware, web servers, load balancers, agents, certificates, and network troubleshooting. 
• Experience developing workflows, custom connectors, and troubleshooting complex issues.  
• Experience with Agile and DevOps tools and methodologies
• Minimum Okta Certified Administrator: Okta Certified Consultant and/or Okta Certified Developer preferred.
• CISSP / CIAM Certification is a plus.
• Experience in Auth0 and SiteMinder is preferred.

Non-Technical skills:

• Exceptional communication and interpersonal skills with the ability to influence and collaborate with diverse stakeholders.
•  Deliver outcomes with a little supervision, must be a self-starter and self-motivator.
• Strong analytical, problem-solving, and decision-making skills, with the ability to manage complex and competing priorities.
•  Strong project management and organizational skills, with the ability to deliver high-quality results.
• Ability to think strategically and suggest creative solutions.
• Ability to synthesize complex requirements into simple business practices.
• Flexible and able to adapt to changing priorities.

More jobs at PepsiCo · Security jobs in Hyderabad