Digital Identity - Senior Solution Delivery Lead Access Management (AM)

Digital Identity - Senior Solution Delivery LeadAccess Management (AM)Advisory Managed Services delivers long term value to clients by providing industry leading risk management solutions to assist clients in managing key risk domains including Cyber, Forensic, Strategic and Financial Risk. Deloitte's solutions enable leading global organizations to focus on their core competencies and mission-critical challenges, while maximizing the power of risk management to protect and grow their businesses. Advisory Managed Services is focused on building, delivering, and managing large scale solutions to establish long term relationships where Deloitte's solutions continue to grow and evolve with the rapidly changing market needs to drive differentiated results and insight to help our clients more cost effectively manage their business.Work you will doThe Managed Services Senior Solution Delivery Lead will be responsible for monitor, manage and enhance the Access Management technology Platform and related processes.The key job responsibilities includes

Serves as Subject Matter Expert for the products, solutions and capabilities related to Access Management (AM)

Support the team members by providing technical guidance on client delivery as well as assist other on-going engagements for resolving critical issues

Setup and configure Access Management environment in production and Disaster Recovery (DR) environments on cloud or on premise with the help of infrastructure team

Lead design and implementation of complex enhancements or On-board / integrate new applications effort for an existing client. Work as per the project plan and ensures that assigned tasks and responsibilities are fulfilled in a timely fashion

Investigate and troubleshoot complex technical issues independently, perform root-cause analysis for high severity issues and provide permanent resolution

Work with technology vendor for product issues, technology evaluation and design reviews

Optimize system configurations for performance improvement

Emergency support in providing technical resolution on high severity incidents in production environment

Capture and translate customer's new requirements (may include customization or advanced technical efforts) into operational and engineering goals

Lead and participate in continuous improvement initiatives, identify ways to improve client delivery by introducing technology innovations or processes re-engineering to increase efficiencies of the team

Work with product vendors to discuss product roadmap and releases, manage patches / hotfix rollouts and plan for major product upgrades

Coordinate with client / client teams at onsite / globally, discuss issues and resolutions. Identify the risks and mitigation plan. Timely escalation of issues to avoid business disruption

Enabling business development by assisting in request for proposal, efforts calculation, cost estimations and pre-sales

Lead process compliance activities by identifying and driving initiatives that are relevant for the project delivery across the practice development and help factor reusability and related benefits

Support the practice by delivering access manager training to new hire, take brown bag session to benefit other engagements

Operate as an advisor for the client, connect with a vendor and help them to elect the best solution for resolving the identified / possible technical issues or security threats in the system / infrastructure

Work with the team to generate service management metrics and reports, KPI / KRI and reports for audit, governance and service improvements plan as per the business requirement and industry standard

Reviews and ensures compliance of technical documents including architecture/design guide, operating instruction manuals, system and configurations documentation, work instructions / run-books, processes, standards and procedures

The TeamThe Deloitte Risk and Financial Advisory Digital Identity solution is a cloud- hosted and fully-managed identity platform that brings together market-tested technologies, industry leading practices, and pre-built identity management use cases to accelerate deployment and reduce time to value.Key Identity and Access management technical capabilities delivered by the team

Identity Governance and Administration

Access Manager

Privileged access management

Application Onboarding/Enhancements

Qualifications and Experience Required:

Tech / B.E / M.Tech and other bachelors and masters qualifications in Computer Science (CS) or Information Technology (IT)

Experience - 7 to 9 years in Access Management and Service management.

Experience in managing large engagements running common AM solution(s) (CA-SiteMinder/ IBM SAM/ Oracle AM/ PingFed/PingAccess / Okta/ Azure AD/ ForgeRock AM)

Strong understanding of enterprise access management and multi-factor authentication

Experience in configuring and deployment of Single Sign-on, attribute-based access control, Proxy based application, strong authentication using access management products

Knowledge of cloud platforms (AWS, Azure, GCP etc.) experience in deploying and managing AM solutions on cloud platforms. AWS is preferred

Knowledge and / or experience with Active Directory Domain Admin (Active Directory design & architecture, Group Policy, Windows Server, Security, Active Directory troubleshooting) in production environment

Strong understanding of LDAP domain including Kerberos, certificate and other authentication mechanisms

Experience in performing administrative tasks such as configuring rules and policies, email templates, authentication store etc. on AM tools

Strong experience in federation concepts like SAML 2.0, WS-FED, OpenID OAuth 2.0

Good knowledge of Web / Application servers (e.g. IIS, WebSphere, WebLogic, JBoss, and Apache etc.)

Strong technical knowledge of authentication and authorization protocols: OIDC, SAML, XACML, LDAP

Experience working on various operating systems such as Windows, Linux, Solaris etc.

Working knowledge on Databases such as MS SQL, Oracle, mySQL

Good understanding or hands-on experience on JSON, REST and SOAP

Experience in integration of AM tools (i.e CA SiteMinder) with IGA tools (i.e. SailPoint)

Ability to create, plan, and execute advanced any AM product trainings and independently drive proof of concepts around fine/coarse grained access control on heterogeneous IT applications

Should have good knowledge of AM Disaster recovery processes and testing

Well-versed with IT service management (ITIL) processes and experience in managing tasks and operations support

Understanding of security and privacy and IAM controls

Experience service delivery, SLA/OLAs, reporting and ITSM tools like ServiceNow, Remedy etc. along with a strong sense of customer satisfaction

Excellent verbal and written communication skills

Advanced documentation skills for drafting / designing the content for client presentation, reporting, new opportunities followed by effective presentation skills

Flexibility to work outside business hours for handing the business critical issues

Limited immigration sponsorship may be available

Preferred:

Understanding of DevOps, Virtualization and IT Infrastructure, Network Protocols (SSL, SSH, FTP, SMTP, HTTP and

HTTPS etc.)

Understanding of various IT / Security technologies- Including DNS, Exchange, Firewalls, VPN Gateways, IPS, Proxy and PKI

One or more certifications on ITIL, PRINCE2, ISO27001, CISSP, IAM Product certifications - Okta, Ping etc.

Exposure to other security domains

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability or protected veteran status, or any other legally protected basis, in accordance with applicable law.