Job Title:  T&T | Cyber - DPT | Assistant Manager | Entra ID (Migration)

The team

Deloitte helps organizations prevent cyberattacks and protect valuable assets. We believe in being secure, vigilant, and resilient—not only by looking at how to prevent and respond to attacks, but at how to manage cyber risk in a way that allows you to unleash new opportunities. Embed cyber risk at the start of strategy development for more effective management of information and technology risks. Lear more about  Cybersecurity

Your work profile

• We are looking for an IAM Migration Engineer to support the modernization of enterprise authentication by migrating applications from legacy CA SiteMinder (web agent–based authentication) to Microsoft Entra ID or ForgeRock Access Management. The role involves application assessment, migration planning, implementing SSO, replacing SiteMinder web agents with modern authentication mechanisms, and integrating legacy applications through ForgeRock Identity Gateway (IG) where direct federation is not feasible.
• Assess existing CA SiteMinder–protected applications and document authentication, authorization, and web agent configurations.
• Plan and execute migration of applications from SiteMinder to Microsoft Entra ID or ForgeRock AM with minimal business disruption.
• Configure and onboard applications using SAML 2.0, OpenID Connect (OIDC), OAuth 2.0, and header-based authentication where applicable.
• Implement ForgeRock Identity Gateway (IG) to protect legacy web applications and provide modern authentication without application code changes.
• Replace or retire SiteMinder web agents with modern access management solutions and reverse proxy integrations.
• Configure authentication journeys, access policies, session management, and MFA.
• Integrate applications with Active Directory, LDAP, Microsoft Entra ID, and enterprise identity providers.
• Support coexistence and phased migration strategies while legacy and modern IAM platforms operate in parallel.
• Troubleshoot authentication, federation, token, certificate, and SSO issues across environments.
• Execute migration testing, application validation, user acceptance support, and production cutover.
• Prepare migration documentation, configuration guides, runbooks, and knowledge transfer.

Key skills required: 

• 4–8 years of IAM implementation or migration experience.
• Hands-on experience with CA SiteMinder (Policy Server, Web Agents, Agent Configuration Objects, authentication schemes).
• Experience with Microsoft Entra ID Enterprise Applications and/or ForgeRock Access Management.
• Experience migrating from SiteMinder to ForgeRock or Microsoft Entra ID.
• Experience with header-based authentication modernization using ForgeRock IG.
• Experience with legacy enterprise applications (Java, .NET, Oracle, WebSphere, WebLogic, IIS).
• Knowledge of Conditional Access and MFA implementation in Microsoft Entra ID.
• Experience with CI/CD pipelines, Docker, or Kubernetes.
• Familiarity with Ping Identity, Okta, or other enterprise IAM platforms.
• Hands-on experience with ForgeRock Identity Gateway (IG) or similar identity-aware reverse proxy.
• SAML 2.0
• OAuth 2.0
• OpenID Connect (OIDC)
• JWT
• LDAP
• SSL/TLS
• Experience integrating applications with Active Directory and Microsoft Entra ID.
• Working knowledge of Linux, Apache, IIS, Tomcat, NGINX, or other web servers.
• Experience with REST APIs, Postman, and troubleshooting authentication flows.
• Basic scripting using Shell, PowerShell, Python, or JavaScript.
• Education: Bachelor’s in computer science, B.Tech/M.Tech or other relevant degree