Senior Identity Services Engineer

Epsilon

About the Business Unit:

At the core of all that Epsilon does is a team that sets the foundation of our IT infrastructure. The team drives innovation and efficiency through pioneering technology across Epsilon's platforms and business verticals. From being the first point of contact for infrastructure needs to final deployment, the team provides end-to-end solutions for our client-facing platforms. ETS supports all aspects of revenue-generating platforms for Epsilon and sets the architectural direction for our enterprise deployments. By adopting the newest technologies, such as Cloud, Automation, and Artificial Intelligence, the team is at the front of redefining our digital business and capturing new opportunities.

Why we are looking for you:

• You have at least 3 years of experience with design & integration of Single Sign-On services or automating identity lifecycle software.
• You understand and have managed active directory services managing end-user’s access
• You want to use or build experience with complex application & end-user integrations across multiple cloud providers.
• You are passionate about the end-user experience in getting access to what they need.
• You can develop and automate repeatable patterns and want to contribute ideas to improvements in complex systems.

What you will enjoy in this role:

• As part of the Epsilon Identity Services team, you’ll be the part of the shared services org that provides access to our employees and end clients, leading to impactful outcomes.
• You’ll get to propose new ideas for optimization, efficiency, and security and see them to fruition.
• You’ll influence reducing risk and enabling growth of our products.
• You’ll get hands-on experience with new cloud technologies powered by SSO services.

Click here to view how Epsilon transforms marketing with 1 View, 1 Vision and 1 Voice.

Responsibilities

• Lead design, development, and implementation of Single Sign-On services and Identity Lifecycle software for our workforce and our products.
• Assess, triage, and lead resolution or prevention of degraded SSO services.
• Develop scripts & automated functions that provision SSO integrations.
• Evaluate business impact and risk exposure based on level of access granted and make improvement recommendations.
• Make service recommendations and develop improvements in automated efficiency.
• Integrate applications into SSO using various methods such as SAML, OIDC, and SCIM.
• Educate & enable operations to triage & identify root cause when degradations occur.
• Stay educated and aware of emerging threats and new capabilities or changes that might positively or negatively disrupt the business.

Qualifications

• 4+ years Single Sign-On expertise – preferably with Okta, Auth0, Ping, or Azure Entra.
• Deep understanding of SAML, OIDC, and Oauth 2.0 protocols
• 3+ years experience with identity lifecycle automation software like SailPoint
• Experience administering directory services such as Windows and Azure AD
• Expert knowledge assessing requirements and proposing best practice designs that integrate with complex applications.
• Proficient experience with Python, and additionally automation & orchestration like Terraform, Ansible, or equivalent
• Expert knowledge to assess an end-user or application degradation and leading the resolution back to healthy state.
• Experience with public cloud identity access services.
• Strong written and oral communication skills across varying levels of the organization.