Deloitte | India Offices of the US

Deloitte Tax Services India Private Limited (“Deloitte Tax in India”) commenced operations in June 2004. Since then, nearly all of the Deloitte Tax LLP (“Deloitte Tax”) U.S. service lines and regions have obtained support services through Deloitte Tax in India.

We provide support through the tax transformation taking place in the marketplace. We offer a broad range of fully integrated tax services by combining technology and tax technical resources to uncover insights and smarter solutions for navigating an increasingly complex global environment.

We provide opportunities to transform tax operations using contemporary technologies in the market. Individuals work to transform their current state of tax to the next generation of tax functions. Are you ready to take the next step in your career to find new methods and processes to assist clients in improving their tax operations using new technologies? If the answer is “Yes,” come join Global Employer Services Technology Center (GESTC)

Job purpose:

We are seeking a proactive and detail-oriented Tier 2 Customer Identity and Access Management (CIAM) Support Analyst who will also serve as a Business Analyst. In this dual role, you will provide advanced technical and functional support for our AWS Cognito CIAM platform, collaborate with cross-functional teams, and contribute to business process optimization and requirements gathering.

Key Job Responsibilities:

• Provide second-tier technical and functional support for application users, leveraging AWS Cognito and related CIAM solutions.
• Handle CIAM support requests, including but not limited to configuring Single Sign-On (SSO) integrations (SAML, OpenID), user profiles, multi-factor authentication (MFA) and credential management.
• Troubleshoot, identify workarounds, and resolve complex CIAM issues by collaborating with product, development, and infrastructure teams.
• Manage user provisioning and de-provisioning, ensuring seamless user lifecycle processes.
• Support onboarding of new application integrations with AWS Cognito, including App Clients and machine-to-machine authentication configuration.
• Conduct gap analysis and process optimization, capture and document functional business requirements for future enhancements.
• Test and validate new security features prior to client and global deployment.
• Perform API testing and debugging using tools such as Postman or SoapUI.
• Develop and maintain comprehensive documentation of CIAM processes, configurations, and support activities.
• Act as a liaison between business units, technology teams, support teams, and end users to manage expectations and ensure timely support delivery.
• Perform database queries, analyze data, and generate reports to support CIAM operations.
• Identify process gaps and recommend solutions to enhance efficiency and effectiveness.
• Work closely with Tier 1 support to resolve escalated CIAM issues promptly.
• Utilize MS Word, Excel, and PowerPoint for documentation and to develop actionable recommendations.

Personal Characteristics:

• Strong work ethic and commitment to client service excellence.
• Analytical thinker with robust problem-solving skills.
• High attention to detail and ability to deliver high-quality results in a dynamic environment.
• Self-starter who integrates quickly with teams and adapts to changing priorities.
• Strong organizational, planning, and execution skills.
• Ability to interact and communicate effectively with stakeholders at all organizational levels.

Education/Background:

·       College coursework: B.E / B.Tech

Key skills required

• 2–3 years of CIAM technology support experience using AWS Cognito or equivalent platforms (e.g., Okta, Ping Identity, Microsoft Entra ID).
• Strong understanding of CIAM principles, user lifecycle management, and Identity Governance Administration (IGA).
• Experience implementing and supporting MFA and SSO integrations (OpenID, SAML).
• Hands-on experience with JWT security tokens, SOAP-based authentication, and REST APIs.
• Excellent written and verbal communication skills, with the ability to collaborate effectively across technical and business teams.
• Working knowledge of databases such as DynamoDB, PostgreSQL, or equivalent.
• Familiarity with Agile methodologies.
• Desirable: Understanding of Role-Based Access Control (RBAC) and Policy-Based Access Control (PBAC).
• Desirable: Proficiency with API testing/debugging tools (e.g., Postman, SoapUI).

Preferred Certifications:

·       Relevant IAM/CIAM or AWS Security Certifications.