Senior Security Engineer (Enterprise Auth)

The Enterprise Auth Engineering team is looking to hire an experienced IAM professional with expertise in the Access Management domain. We prefer candidates with previous experience in implementing Single-Sign-On and protocols, IDP-based Federation, and MFA such as FIDO and LDAP Directories. We prefer candidate who has solid hands-on experience and deep knowledge of SSO tools such as Okta, Azure AD, Ping Identity, or a comparable product.

Job Description

• Implement and manage enterprise-wide access management solutions such as SSO (Single Sign-on), MFA (Multi-Factor Authentication), dynamic authorization, and privileged access management
• Integrating applications using standard protocols such as SAML, OIDCand enable automation to bring efficiency
• Use DevOps and tools such as Terraform/Ansible to deploy and manage Infrastructure-as-a-code for Access Management systems
• Support daily operations for the team for managing and troubleshooting issues with authentication/authorization platform
• Troubleshoot and resolve user access issues and handle security incidents
• Collaborate with IT and security teams to improve access management systems and protocols
• Document design and engineering artifacts for custom solutions deployed in tools such as Okta/SGNL
• Prepare SOPs and knowledge guides for end users and security practitioners.
• Collaborate with IAM and security team members to improve access management systems, discover new capabilities for achieving Zero Trust.
• Participate in 24x7 oncall support as L3 engineer for critical systems

Qualifications

• Bachelor’s degree in IT, information security, computer science, or a related field.
• 5 to 7 years’ experience in IAM or related field such as Security product development or
• Hands on experience implementing SSO solutions, MFA, Passwordless and API access management in medium to large scale industry
• Comprehensive knowledge of authentication standards and technologies such as SAML, OIDC, OAuth, multi-factor authentication, JSON Web Token (JWT), etc.
• In-depth knowledge of SSO tools such as Okta, Entra ID, Ping Federate and PBAC such as PlainID or SGNL.
• Possess working knowledge of FIDO security products that can be used for advanced biometric authentication solutions, and knowledge of various LDAP products such as AD and Radiant Logic FID, and web services (REST/SOAP)
• Proficiency in programming languages such as Java, Python, JavaScript
• Have a strong understanding of Windows, Unix, databases, and directory services, and experience with cloud technologies (Google Cloud Platform, Azure, AWS).
• Experience with DevOps, automation/orchestration tools (Ansible, CircleCI, Terraform, etc.) and coding/scripting experience using Java, Javscript, and Python
• Familiarity with data protection standards defined by KISA, security standards and frameworks such as NIST, ISO 27001 and their application to Access Management.

Nice to have Qualifications

• Have one of the following certifications: Okta Certified Professional, Okta Certified Administrator, or Okta Certified Consultant
• Experience with Identity Governance products (SailPoint, Saviynt, etc.)
• Experience in privileged access management (CyberArk, BeyondTrust, etc.)
• Hold a CISSP certificate

Equal Opportunities for All

Coupang is an equal opportunity employer. Our unprecedented success could not be possible without the valuable inputs of our globally diverse team.