SSO SRE Engineer (f/m/d)

SSO SRE Engineer (f/m/d)

We are HCLTech, one of the fastest-growing large tech companies in the world and home to 225,000+ people across 60 countries, supercharging progress through industry-leading capabilities centered around Digital, Engineering and Cloud. The driving force behind that work, our people, are diverse, creative, and passionate, raising the bar for excellence on a regular basis. We, in turn, work hard to bring out the best in them as we strive to help them find their spark and become the best version of themselves that they can be. If all this sounds like an environment you’ll thrive in, then you’re in the right place. Join us on our journey in advancing the technological world through innovation and creativity.

We are seeking a highly skilled SSO Site Reliability Engineer (SRE) to ensure the reliability, availability, scalability, and security of enterprise Single Sign-On (SSO) services supporting critical business applications.

The role combines Identity & Access Management (IAM), SSO platform administration, automation, monitoring, incident management, and Site Reliability Engineering practices to deliver highly available authentication and federation services across on-premises and cloud environments.

Key Responsibilities:

SSO Platform Operations

• Administer and support enterprise SSO platforms and federation services.
• Manage authentication integrations across cloud, SaaS, and on-premises applications.
• Ensure high availability and resilience of SSO infrastructure.
• Maintain and optimize federation trust relationships.

Reliability Engineering

• Define and monitor SLIs, SLOs, and Error Budgets for authentication services.
• Perform capacity planning and platform performance optimization.
• Drive reliability improvements through automation and operational excellence.
• Participate in on-call support and major incident management.

Identity & Federation Management

• Support SSO technologies such as:
• Microsoft Entra ID (Azure AD)
• PingFederate
• ForgeRock
• Red Hat SSO
• Experience with GCP (preferred)
• Configure and troubleshoot:
• SAML 2.0
• OAuth 2.0
• OpenID Connect (OIDC)
• WS-Federation
• LDAP/LDAPS
• Kerberos

Automation & DevOps

• Develop automation using PowerShell, Python, Terraform, Bash, and YAML.
• Automate user onboarding, provisioning, federation configuration, certificate renewals, and reporting.
• Integrate SSO services with CI/CD pipelines.
• Implement Infrastructure-as-Code (IaC) and platform standardization.

Monitoring & Observability

• Implement monitoring, alerting, and health-check mechanisms for authentication systems.
• Utilize tools such as:
• Splunk
• Dynatrace
• Grafana
• Prometheus
• Conduct proactive troubleshooting and root cause analysis.

Security & Compliance

• Ensure compliance with enterprise security standards and regulatory requirements.
• Support security audits and access reviews.
• Manage authentication certificates, secrets, and cryptographic controls.

Partner with cybersecurity teams on identity-related risk remediation.

Required Skills & Experience:

Identity & Access Management

• Deep understanding of:
• Single Sign-On (SSO)
• Federation Services
• Identity Lifecycle Management
• Conditional Access
• Multi-Factor Authentication (MFA)

Authentication Protocols

• Strong hands-on expertise with:
• SAML 2.0
• OAuth 2.0
• OpenID Connect (OIDC)
• Kerberos
• LDAP
• WS-Federation

SRE & Operations

• Incident, Problem, Change, and Availability Management.
• Monitoring and observability tools.
• Production support in large-scale enterprise environments.
• Capacity planning and performance optimization.

DevOps

• GitHub/GitLab
• CI/CD pipelines
• Infrastructure as Code (Terraform preferred)

Experience

• 7 to 10+ years of overall IT experience.
• 3+ years supporting MFA, IAM, or Authentication platforms.
• Experience working in large enterprise or financial services environments preferred.

Key Competencies

• Strong troubleshooting and analytical skills.
• Excellent stakeholder management.
• Automation-first mindset.
• Operational excellence and continuous improvement focus.

________________________________________________________________________

We promote equal opportunities for all employees, regardless of their cultural and social background, gender, disability, age, religion, beliefs, and sexual identity. We give priority consideration to severely disabled applicants and those of equal status in the case of equal suitability.