### Job_Dedcrip:
Ekman Associates, Inc. is a Southern California based company focused on the following services: Management Consulting, Professional Staffing Solutions and Executive Recruiting.            Summary        :       Looking for a Senior Identity Federation Architect with deep level expertise in web security, applied cryptography, software security vulnerabilities, knowledge of federation and IAM solutions.          Responsibilities:         Ability to enable application movement to modern authentication in the multi-cloud environment through use of SSO and Federation.         Design, develop, deploy, integrate and support Single Sign On (SSO) using DevOps model for all types of devices. Develop, maintain, support and troubleshoot in house and vendor applications hosted in Private/Public Clouds, Analyze Server side and client Side SSO logs to debug issues.         Plan and develop security measures to safeguard information against accidental or unauthorized modification, destruction, or disclosure.         Work with management and other personnel to identify security best practices and applies a risk-based approach to information security covering the security aspects of Cloud & On-premise IAM services with a focus on Authentication services (SSO and MFA).        Produce and implement enterprise-level designs for Azure authentication and on prem AD, as wells as Azure B2B/B2C authentication for global initiatives.          Provide engineering support for the Identity and Authentication team.         Support the enterprise SSO platform to enable a secure and enhanced authentication experience for enterprise users.          Knowledge and experience with information security, Authorization and Authentication systems, infrastructure and implementation techniques is a key component to this role.         Defining the product requirements for our next generation Identity platform and delivering on our KPIs and multiyear roadmap with a focus on building a massively scalable platform         Work on a daily basis with Agile engineering scrum teams and participate in daily standups, grooming and planning to deliver product features on a bi-weekly basis         Have a background in APIs and platform product lines that have been made available to developers, partners and large enterprises via self-service documentation, developer guides and turnkey integrations         Understanding the complexities of a large-scale global platform with a focus on scalability, reliability and resiliency while maintaining exceptional quality of software and Lead steady state and continuous improvement efforts for Authentication technologies for globally diverse solutions.         Partnering with cross-functional teams to build Identity products and constantly innovate on APIs, platform, web (desktop/mobile) and native apps (iOS and Android)          Qualifications:         10+ years of experience in Information Security with 7+ year in Identity Federation space.        Passionate about Identity and Access Management with background in OAuth 2.0, OpenID connect, SAML, WS-Fed, SCIM (System for Cross domain Identity Management) and API authorization/access management         Prior experience in areas like password management, encryption, two factor authentication, Biometrics, WebAuthn and FIDO standards, risk-based authentication and strong customer authentication         Knowledge in areas like REST APIs, GraphQL and React JS/Native as well building and packaging of SDKs for websites and Native Applications (iOS and Android)         Strong hands-on experience with SSO & MFA leveraging AD Connect,         Strong hands-on experience with industry standard SSO technologies and protocols (OAuth, OpenID Connect,)         Expertise in Identity and Authentication solutions such as Active Directory, Azure AD, Azure B2B, Azure B2C and Okta        Knowledge of LDAP and Active Directory services, MFA, Risk based authentication and privileged access management         Holistic view of IAM (Authentication and Authorization Data, Endpoint Security, Network Security, Policy Engine)         Ability to utilize various programming or scripting languages such as Shell scripting, Perl, Python, JavaScript, HTML and PowerShell         Understanding of API design concepts, RESTful Services, and modern application interaction patterns         Familiarity with deployments and integration of IAM solutions within the cloud (Azure, AWS, GCP)         Experience in deploying large-scale, global projects and programs         Familiarity with IT security and risk management practices         High sense of ownership, urgency, and drive. Proven track record of getting things done, managing multiple tasks including communication with internal and external teams while consistently delivering on schedule         Excellent oral and written communication skills with the ability to adapt your message to the technical level of the audience (developers, product managers, and senior business leaders)        Bachelor's Degree in Computer Science, Engineering, Network Security or related field          Demonstrated excellent technical writing skills and project/program management experience        Understanding of Agile Life Cycle and project planning/execution skills including estimating and scheduling. Knowledge of scrum planning tools ( e.g. Jira is a plus)        IT Certifications including Microsoft Certifications, CISSP, SANS, Security+, and ITIL v3 Foundation certifications        International experience beneficial; multiple language skills a plus          Qualified Candidates Only        :      If you wish to learn more about this opportunity please submit your resume.  To learn more about Ekman Associates, Inc. please visit our website at www.ekmanassociates.com

### Response:

Job Requirements:- 10 years of experience in Information Security with 7 year in Identity Federation space.- Passionate about Identity and Access Management with background in OAuth 2.0, OpenID connect, SAML, WS-Fed, SCIM (System for Cross domain Identity Management) and API authorization/access management.- Prior experience in areas like password management, encryption, two factor authentication, Biometrics, WebAuthn and FIDO standards, risk-based authentication and strong customer authentication.- Knowledge in areas like REST APIs, GraphQL and React JS/Native as well building and packaging of SDKs for websites and Native Applications (iOS and Android).- Strong hands-on experience with SSO & MFA leveraging AD Connect.- Strong hands-on experience with industry standard SSO technologies and protocols (OAuth, OpenID Connect).- Expertise in Identity and Authentication solutions such as Active Directory, Azure AD, Azure B2B, Azure B2C and Okta.- Knowledge of LDAP and Active Directory services, MFA, Risk based authentication and privileged access management.- Holistic view of IAM (Authentication and Authorization Data, Endpoint Security, Network Security, Policy Engine).- Ability to utilize various programming or scripting languages such as Shell scripting, Perl, Python, JavaScript, HTML and PowerShell.- Understanding of API design concepts, RESTful Services, and modern application interaction patterns.- Familiarity with deployments and integration of IAM solutions within the cloud (Azure, AWS, GCP).- Experience in deploying large-scale, global projects and programs.- Familiarity with IT security and risk management practices.- High sense of ownership, urgency, and drive. Proven track record of getting things done, managing multiple tasks including communication with internal and external teams while consistently delivering on schedule.- Excellent oral and written communication skills with the ability to adapt your message to the technical level of the audience (developers, product managers, and senior business leaders).- Bachelor's Degree in Computer Science, Engineering, Network Security or related field.- Demonstrated excellent technical writing skills and project/program management experience.- Understanding of Agile Life Cycle and project planning/execution skills including estimating and scheduling. Knowledge of scrum planning tools ( e.g. Jira is a plus).- IT Certifications including Microsoft Certifications, CISSP, SANS, Security, and ITIL v3 Foundation certifications.- International experience beneficial; multiple language skills a plus.