Azure API Gateway Specialist - SAML Federation (10-15 yrs)

Role : Azure API Gateway & Federated SSO Specialist

Location : Hyderabad

- Experience : 8+ Years

Key Responsibilities :

Azure API Management (APIM) :

- Design, configure, and manage Azure API Management as the gateway for secure API access.

- Implement API authentication using OAuth 2.0, OIDC, and SAML 2.0 for third-party integrations and federated identity systems.

Federated Single Sign-On (SSO):

- Enable Federated Authentication for APIs using Entra ID (Azure AD), OAuth 2.0, OpenID Connect, and SAML 2.0.

- Manage SSO across multiple services and domains for seamless user authentication.

API Security Policies :

- Define and configure API security policies, including rate limiting, DDoS protection, IP filtering, and CORS.

- Implement JWT-based authentication, API Key, and Client Certificate authentication for external integrations.

API Call Orchestration :

- Design and implement API orchestration workflows, service chaining, and error handling logic to support multi-step API interactions.

- Leverage Azure Logic Apps, Azure Functions, or custom microservices for real-time API flow automation.

Role-Based Access Control (RBAC) :

- Configure RBAC policies for API consumers, ensuring secure access control using OAuth scopes and roles.

- Implement Conditional Access and Multi-Factor Authentication (MFA) policies for enhanced security.

Skills and Qualifications :

- 8+ years of experience in Azure API Management (APIM), Entra ID (Azure AD IAM), and API Orchestration.

- Deep knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and JWT for API security and federated authentication.

- Extensive experience in API orchestration, service chaining, and API security models (throttling, DDoS, rate limiting).

- Proficiency in managing API authorization, RBAC, and Conditional Access policies.

- Experience with Azure Logic Apps, Azure Functions, or custom microservices to automate API workflows.

- Strong troubleshooting skills in API authentication failures and identity federation issues.

- Knowledge of Hybrid Cloud Integrations (Azure VNet, VPN, ExpressRoute) and microservices security.

Nice to Have :

- Experience with Microsoft Defender for API security and Zero Trust architecture.

- Exposure to CI/CD pipelines for API security automation.

- Knowledge of multi-cloud identity management (AWS Cognito, Google Identity Platform, etc.).

Role Details :

- Part-time, long-term contract