SSO and Identity Operations

Description Summary: The SSO & SailPoint Operations Engineer is responsible for supporting the stability, availability, security, and ongoing operation of enterprise Single Sign-On (SSO) and Identity Governance platforms. This role provides production support for SailPoint IdentityIQ and SSO technologies, including Microsoft Azure, Ping, IBM WebSEAL , and Radiant Logic.     Th is individual will support mission-critical identity services by troubleshooting incidents, perform platform maintenance, assist with deployments, and resolv e identity lifecycle and access-related issues. The engineer will work closely with IAM Operations, IAM Engineering, Information Security, Infrastructure, application teams, and third-party vendors.     This role requires strong technical troubleshooting skills, a production-support mindset, and the ability to operate effectively in a highly available and regulated enterprise environment.

Provide day-to-day production support for enterprise SSO and SailPoint platforms.   Monitor platform health, availability, scheduled processing, integrations, and operational alerts.   Investigate and resolve incidents involving authentication, authorization, identity lifecycle management, provisioning, and access certifications.   Serve as an escalation point for complex SSO and Identity Governance production issues.   Perform root-cause analysis and implement corrective and preventive actions for recurring incidents.   Participate in incidents , problems , changes , and release management processes.   Respond to production incidents in accordance with established service level and availability requirements.   Participate in an on-call support rotation for mission-critical IAM services.

Bachelor's Degree   5+ years of related experience or an additional 4 years of related work experience may be considered in lieu of the bachelor’s degree     Preferred Qualifications:   Hands-on experience with SailPoint IdentityIQ 8.x.   Experience supporting one or more SSO platforms, including Microsoft Azure, Ping, or IBM WebSEAL .   Experience with Radiant Logic or other LDAP-compliant directory platforms.   Knowledge of Active Directory, Microsoft Entra ID, Oracle Unified Directory, or IBM Security Directory Server.   Understanding authentication and federation technologies, including SAML, OAuth 2.0, OpenID Connect, LDAP, and Kerberos.   Experience troubleshooting web and network technologies, including HTTP, HTTPS, TLS, DNS, proxies, firewalls, and load balancers.   Experience with PowerShell, shell scripting, BeanShell , Java, or similar scripting and programming technologies.   SQL experience and familiarity with Oracle or other relational database platforms.   Experience reviewing logs and using enterprise monitoring or observability tools such as Splunk.   Experience with ServiceNow or a comparable IT service management platform.   Exempt Status: (Yes   = not eligible for overtime pay) ( No   = eligible for overtime pay) Yes Workplace Type: Office Our Approach to Office Workplace Type Certain positions outside our branch network may be eligible for a flexible work arrangement. We’re combining the best of both worlds:  in-office and work from home. Our approach enables our teams to deepen connections, maintain a strong community, and do their best work. Remote roles will also have the opportunity to come together in our offices for moments that matter. Specific work arrangements will be provided by the hiring team. Huntington is an Equal Opportunity Employer. Tobacco-Free Hiring Practice: Visit Huntington's Career Web Site for more details. Note to Agency Recruiters:   Huntington Bank will not pay a fee for any placement resulting from the receipt of an unsolicited resume.  All unsolicited resumes sent to any Huntington Bank colleagues, directly or indirectly, will be considered Huntington Bank property.