SSO L3 Specialist

Wepoint•Montreal, QC

10d•Hybrid

About The Position

The SSO team provides identity and access management tools as a middleware team, supporting authentication and authorization for internal and external clients. Using standardized frameworks, the team maintains and governs access policies and deploys technologies that ensure the right entities have appropriate access to technological resources. The position holder will join a multi-geographic (present in 3 regions and 6 sites) and multidisciplinary team, providing support and project delivery around SSO and Identity Management platforms, particularly in the following areas: Architecture; Project delivery; Platform support and maintenance; Incident and problem management; Change management. The candidate must also be proficient in cryptography concepts such as RSA, symmetric and asymmetric encryption, digital certificates, and digital signatures.

Requirements

Bachelor's degree in computer science or equivalent
Minimum of 5 to 7 years of experience in IT
CA Siteminder Web SSO
SOA security – SAML/WS-Security
Self-provisioning tools (BMC ControlSA, SailPoint, ForgeRock)
LDAP
Kerberos/SSL-TLS/PKI/GSS-API/SPNEGO
OAuth2, OpenID Connect
IIS/WCF/WIF, WAS security models
Infrastructure standards (load balancers, servers, networks, storage)
Automation-oriented approach (Ansible)
Scripting (Python or shell)
Application servers and web technologies: Tomcat, Apache, Nginx, IIS
Excellent logical analysis and problem-solving skills
Experience with recognized ITSM and project management tools
Excellent communication skills in English
Only candidates legally authorized to work for any employer in Canada will be considered.

Nice To Haves

ITIL Foundation certification desired
Axway Security Gateway
SQL, database schemas
API authentication services
Apigee API Gateway
Process and quality management, ITIL v2/v3
Microsoft Project, advanced Excel, PowerPoint, Word
Atlassian and Jira tools
ServiceNow experience
Excellent communication skills in French

Responsibilities

Collaborate closely with other team members.
Respect current processes and procedures.
Request training to strengthen knowledge when necessary.
Show initiative within acceptable risk levels.
Escalate issues and seek advice when in doubt.
Apply user-oriented service principles and behaviors for roles interacting with users.
Escalate risks and incidents to the team lead.
Minimize operational failures, including fraud risks, by contributing to the definition and implementation of adequate controls.
Ensure appropriate escalation to management and/or Permanent Control (or Compliance as applicable) upon identification of a problem.
Actively contribute to the operational permanent control framework.
Provide architectural expertise to drive change and improvement in technologies and processes.
Contribute to the development of SSO and LDAP technology roadmaps.
Collaborate with CIB architecture teams during architecture reviews.
Monitor emerging technologies and market trends.
Automate processes to accelerate delivery times.
Take responsibility for the delivery of key projects around SSO and LDAP technologies.
Work with application production support project managers to define, design, document, and implement new features.
Collaborate with application developers for low-level technical diagnosis of incidents.
Provide SSO and IDM expertise to business application teams.
Act as a technology evangelist to improve authentication processes and technologies within the company.
Proactively monitor, manage, and improve the availability and performance of production environments (presentation, application, and infrastructure layers).
Proactively manage the capacity of production applications.
Work with partner teams to analyze major and critical incidents.
Identify tactical or strategic improvements to reduce the number of recurring incidents in SSO and LDAP areas.
Work within the change management process to ensure all production changes are planned and executed in a controlled manner.
Be responsible for the quality of changes made in SSO and IDM environments.
Participate and share knowledge during weekly Change Control Board and Problem Management committee meetings.

Benefits

Minimum of 3 weeks of vacation starting from the first year
Comprehensive group insurance with a generous employer contribution
Employer contribution to a group RRSP
Full remote work flexibility: Hybrid, Remote, or On-site
A warm, bright, and welcoming office offering fresh fruit, coffee, beverages, occasional meals, etc.
Annual IT equipment budget
A balanced work environment with flexible working hours
Career development: training and certifications, online or in-person learning, Wepoint Academy, etc.
An international community of experts ready to share their knowledge
A company culture focused on individuals’ needs and their belonging to a strong community.