Security Consultant

We are seeking an experienced IAM L3 / SME Engineer to lead the support, optimization, and governance of a WSO2-based Customer Identity and Access Management (CIAM) platform. The role will serve as the highest technical escalation point for identity services, authentication, SSO, MFA, federation, integrations, platform performance, and security operations.

Key Responsibilities:
- Provide L3 support and technical leadership for WSO2 Identity Server and CIAM services.
- Manage and troubleshoot authentication, authorization, SSO, MFA, federation, and identity lifecycle issues.
- Lead complex integrations with API Gateways, Keycloak, LDAP/AD, Kafka, SIEM, social identity providers, OTP platforms, and partner applications.
- Perform advanced troubleshooting of OAuth, OIDC, SAML, SCIM, JWT, certificate, keystore, API, and federation-related issues.
- Support platform upgrades, migrations, production cutovers, UAT, hypercare, and transformation initiatives.
- Conduct root cause analysis (RCA), performance tuning, capacity planning, and service optimization.
- Define operational standards, runbooks, SOPs, monitoring, and support processes.
- Mentor L1/L2 engineers and coordinate with infrastructure, application, and vendor support teams.
- Ensure compliance with security best practices, audit requirements, and IAM governance standards.

Expected Deliverables:
- Platform architecture and design review reports.
- RCA reports and problem management updates.
- Security hardening recommendations and implementation plans.
- Performance optimization and capacity planning reports.
- Integration design and validation documents.
- CIAM operational governance documentation.
- Production readiness assessment reports.
- Migration, cutover, and hypercare support reports.
- Knowledge transfer and technical training documentation.
- Continuous service improvement recommendations and roadmap inputs.

Technical Skills Required:
- Strong hands-on experience with WSO2 Identity Server administration, configuration, troubleshooting, clustering, and integrations.
- Expertise in IAM/CIAM concepts, authentication, authorization, federation, MFA, consent management, and identity lifecycle management.
- Advanced knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM 2.0, JWT/JWKS, PKCE.
- Experience with Linux/RHEL, SSL/TLS, certificates, keystores, truststores, and networking.
- Knowledge of PostgreSQL, Oracle, REST APIs, LDAP/Active Directory, API Gateways, and Keycloak.
- Experience with Kafka, SIEM platforms, Prometheus, Grafana, and log analysis tools.
- Strong troubleshooting and RCA skills in enterprise production environments.
- WSO2 Certified Professional | IAM/CIAM Certifications