Cybersecurity - IAM-Okta/Forgerock/Identity/Ping/ Entra Developer

A career in our Cybersecurity, Privacy and Forensics will provide you the opportunity to solve our clients most critical business and data protection related challenges. You will be part of a growing team driving strategic programs, data analytics, innovation, deals, cyber resilency, response, and technical implementation activities. You will have access to not only the top Cybersecurity, Privacy and Forensics professionals at PwC, but at our clients and industry analysts across the globe.

Our Identity and Access Management team focuses on helping our clients design, implement and operate effective access controls that protect against threats, support business objectives, and enable growth. As companies pivot toward a digital business model, exponentially more data is generated and shared among organizations, partners and customers.

Youll play an integral role in helping our clients ensure they are protected by using the latest strategies and tools in effectively managing access to all this data. Our team helps organizations manage access to critical assets by focusing on areas like Access Management (AM), Identity Governance & Administration (IGA), Privileged Access Management (PAM), Entitlement Management and Directories.

In joining, youll be a part of a team that values technical and business acumen and provides training and development to extend and develop your skills while, fostering a strong collaborative culture. Youll have the opportunity to focus on Access Management (AM), Identity Governance & Administration (IGA), Privileged Access Management (PAM), Entitlement Management and Directories, among other skills.

• Use feedback and reflection to develop self awareness, personal strengths and address development areas.
• Delegate to others to provide stretch opportunities and coach to help deliver results.
• Develop new ideas and propose innovative solutions to problems.
• Use a broad range of tools and techniques to extract insights from from current trends in business area.
• Review your work and that of others for quality, accuracy and relevance.
• Share relevant thought leadership.
• Use straightforward communication, in a structured way, when influencing others.
• Able to read situations and modify behavior to build quality, diverse relationships.
• Uphold the firms code of ethics and business conduct.

• Minimum of 4+ years of professional experience in progressive roles in Identity and Access Management
• Minimum of 2+ years of professional experience in development using UI and Server side technologies like Java, J2EE, NodeJS,Angular, ReactJS
• Minimum of 3+ years of Okta/Ping Identity/ForgeRock/Microsoft Entra experience with handson.

• Technical experience in designing and implementing identity and access management solution
• Good understanding of Authentication, Authorization, MFA, SSO, Federation, OAuth, OIDC, Provisioning, Reconciliation, Proxy and Directory Services concepts.
• Three or more years of experience with software development and implementation of one or more Access management and federation products such as Okta/Ping Identity/ForgeRock/Microsoft Entra or equivalent solutions.
• Managing Okta/Ping Identity/ForgeRock/Microsoft Entra solution deployments through the complete system development life cycle, including analysis of solution requirements, solution design, architecture and supporting business processes, configuring and customizing IAM software products using Java/JavaScripts/GroovyScripts, and testing (unit, system integration, performance and UAT testing).
• Software development and implementation of one or more Access management and federation products such as Okta/Ping Identity/ForgeRock/Microsoft Entra, PingFederate, PingAccess, Ping Directory, OpenDS, or at least equivalent solutions (e.g., CA (SiteMinder, AuthMinder, Identity Minder, Federation Security, Directory), or Oracle (Directory, Access Manager, Identity Federation).
• Experience configuring authorizations with API Access management and implementing Single SignOn (SSO) with OIDC required
• Experience in configuring High Availability solutions (e.g. load balancing, fail over, etc.)
• Experience with Enterprise Provisioning, Roles based Access Controls, SingleSign On, external and internal federation and systems integration.
• Development experience in Okta/Ping Identity/ForgeRock/Microsoft Entra IDM of Objects, connectors and mapping in IDM solutions, understanding/knowledge on user, role life cycle management, provisioning data to and from various sources like AD/LDAP, writing/creating custom REST endpoints using JavaScript or Groovy. Knowledge on out of box and custom endpoints and connectors, reconciliation and self service.
• Experience on Platform UI, Ping Identity/ForgeRock UI.
• Development experience in Ping/ForgeRock IG, Okta Access gateway or other reverse proxy to configure and write custom routes/proxy rules, manage application access and security with DNS capabilities, proxying web service requests and external rest calls connections.
• Experience with Enterprise Directory/Directory Integration (ITDS, SDS, AD, LDAP).
• Complete end to end understanding of all the products of Okta/Ping Identity/ForgeRock/Microsoft Entra
• Development of custom Authentication Module, Authentication Trees Nodes, Account Mappers and Adapters based on outlined customer requirements and use cases.
• Customization of directory operations like creation of custom password policies, indexes, schema etc. Should have knowledge on generic ldap operations
• Implementing automated provisioning of endpoint by using custom provisioning flows, SCIM or JIT capabilities.
• Should possess capabilities in designing solutions on Okta/Ping Identity/ForgeRock/Microsoft Entra
• Experience in integrating with various identity and provisioning solutions is a plus.
• Solid understanding of concepts of SAML 2.0 and various OIDC grants.
• Okta/Ping Identity/ForgeRock/Microsoft Entra Certified Consultants are strongly preferred

Degrees/Field of Study required Degrees/Field of Study preferred Accepting Feedback, Accepting Feedback, Access Control Models, Access Control System, Access Management, Active Listening, Analytical Thinking, Authorization Compliance, Authorization Management Systems, Azure Active Directory, Cloud Identity and Access Management (IAM), Communication, Creativity, CyberArk Management, Cybersecurity, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Federated Identity Management, ForgeRock Identity Platform, Identity and Access Management (IAM), IdentityBased Encryption, Identity Federation, Identity Governance Framework (IGF) {+ 22 more}