SSO Engineer
Job title: SSO Engineer in Nashville, TN at Asurion
Company: Asurion
Job description: Business Function: TechnologyDepartment: Data Services
Location: Nashville, TNWe are seeking a driven, highly motivated Authentication Engineer looking to design and implement enterprise-wide authentication and authorization capabilities and services at Asurion. They work as part of a cross functional team to design and implement solutions for new and existing systems and applications, ensuring seamless access for users while maintaining security controls. Asurion offers a large, fast paced, multi-cloud environment that provides opportunities to use and gain exposure to the latest cloud services and technologies.Essential Duties and Responsibilities:
- Implement and support enterprise access management solutions, including authentication, authorization, and single sign-on (SSO) mechanisms for a global organization.
- Collaborate with cross-functional teams to design and implement solutions with existing systems and applications, ensuring seamless access for users while maintaining security controls.
- Conduct regular security assessments and audits of services to identify and remediate vulnerabilities, ensuring data confidentiality, integrity, and availability.
- Stay updated on emerging technologies and industry trends in identity management, evaluating their potential impact and relevance to the organization.
- Provide technical guidance and support to teams on issues, troubleshooting and resolving complex problems as needed.
- Participate in incident response and Security incident management activities, assisting in the investigation and driving resolution and root cause.
- Create and maintain configurations, processes, and procedures to effectively transfer and maintain knowledge within the organization and supporting solutions throughout their lifecycle.
- Provide quality customer service through excellent communication, feedback, and follow-through.
- Drives resolution of complex problems and recommends capacity, performance improvements and cost savings where feasible.
- Facilitates understanding and agreements among multiple stakeholders to resolve system and applications interfaces and interoperability concerns
- Serves as an escalation point as needed during critical and/or high impact issues
- Promotes and models Asurion’s Core Values
- Bachelor’s degree in Computer Science, Software Engineering, Computer Engineering, or equivalent experience
- Five or more years of experience in implementing and supporting authentication and authorization processes using a variety of technologies such as Ping Identity PingFederate, PingID, PingOne Protect, Microsoft Active Directory, and Azure Active Directory/Entra ID
- Extensive knowledge of authentication, authorization, and related protocols such as SAML 2.0, OAuth 2.0, OpenID Connect, LDAP (Lightweight Directory Access Protocol), Kerberos, RADIUS (Remote Authentication Dial-In User Service), SCIM (System for Cross-domain Identity Management), FIDO2
- Working knowledge of directory services products such as Microsoft Active Directory, Azure Active Directory/Entra ID, Google Workspace Directory, Amazon Cognito
- Familiarity with scripting languages such as Python, PowerShell, etc. and Infrastructure as Code frameworks such as Terraform and CloudFormation
- Ability to effectively communicate and articulate strategy at the CXO levels
- Excellent communications skills and experience working externally with customers and partners
- Strong relationship management skills
- Dedication to continuous improvement, security process engineering, and operational excellence
- Strong problem solving and collaboration skills with demonstrated ability to explain complex technical concepts to a variety of audiences for the understanding of all involved
- Etc.