Platform Engineer, IAM, Authentication

This is a fully remote position, open to applicants in India.

📋 Description

• Evaluate information security risks in accordance with internal policies and external best practices.

• Assist in safeguarding information and IT assets by testing security systems.

• Implement cybersecurity technologies while providing daily business support.

• Oversee third-party vendors to ensure compliance with standards.

• Deliver information security training to relevant teams.

• Act as a senior escalation point for critical, high-severity authentication and SSO incidents.

• Monitor, analyze, and troubleshoot the health, availability, and performance of the Ping platform.

• Provide operational support for SSO, MFA, and directory services.

• Promote continuous improvement through the automation of recurring operational tasks.

• Mentor and coach junior team members.

• Present identity and security concepts, platform roadmaps, and improvement initiatives.

⛳️ Requirements

• Expertise in information security, compliance, and risk management.

• Knowledge of security solutions and their relevance to Mondelēz International.

• Familiarity with security strategies, awareness campaigns, policies/standards, and governance.

• Ability to communicate effectively with technical specialists, leaders, and colleagues.

• Strong analytical and problem-solving skills.

• Team-oriented mindset, supporting and leading efforts to achieve shared objectives.

• Serve as a subject matter expert (SME) for PingFederate, PingID MFA, and Ping Directory.

• Design, implement, and maintain integrations for SAML, OAuth 2.0, and OpenID Connect (OIDC).

• Support the onboarding of new applications, including the configuration and maintenance of SP/IdP connections.

• Design authentication policies, selectors, contract mappings, and claim transformations.

• Manage certificate lifecycles, including signing and encryption certificates and trust stores.

• Conduct deep troubleshooting of SAML, OAuth 2.0, OIDC, and WS-Fed flows.

• Analyze logs and metrics across PingFederate, PingID, and Ping Directory.

• Collaborate with application and IT teams to integrate secure, user-friendly SSO and MFA.

🏝️ Benefits

• No relocation support is available.