External Identity Support Analyst

Join Kocho as an External Identity Support Analyst, where you will provide advanced technical support for external identity platforms and customer identity solutions. You will be responsible for maintaining the Configuration Management Database, supporting client transitions, and contributing to the development of Kocho's identity service offerings. This role offers flexible working, enhanced parental leave, private health insurance, life assurance, critical illness support, training opportunities, a birthday day off, and wellness support.

• Provide 3rd-line remote technical support for customer identity and access solutions, focusing on external identity technologies.
• Maintain and improve the Configuration Management Database (CMDB) for supported services, and support the smooth transition of clients and projects into Managed Solution Support.
• Contribute to the development and enhancement of Kocho’s identity service offerings, and operate as a subject matter expert, offering expert advice and solutions to complex identity challenges.
• Strong troubleshooting abilities for complex and bespoke identity-integrated applications
• Ability to work effectively in virtual, collaborative, and team-based settings
• Token flows, claims, sessions
• OpenID Connect
• SAML 2.0
• Excellent communication skills with the ability to explain technical issues clearly to both technical and non‑technical audiences
• Experience in operational support roles within business environments
• Understanding of security principles including least privilege, secure design, and common vulnerabilities
• Understanding of federation and identity protocols:
• Experience supporting enterprise-scale environments
• Ability to read and modify code in .NET and C#
• Demonstrated learning agility and a willingness to adopt new identity technologies
• Authorization concepts (roles, permissions, app registrations, service principals)
• Knowledge of Conditional Access (CA) and Multi‑Factor Authentication (MFA)
• User and group lifecycle management (creation, modification, deletion, dynamic groups)
• Experience with SQL and database management tools
• OAuth 2.0
• Strong analytical and problem‑solving ability
• Solid working knowledge of PowerShell for automation and diagnostics
• Familiarity with:
• Azure AD B2C / Entra External ID
• Microsoft Entra ID (formerly Azure AD)
• Azure DevOps
• SC‑300 (Identity & Access Administrator)
• Experience with Customer Identity & Access Management (CIAM) solutions or external identity lifecycle management
• SC‑900 / AZ‑900 fundamentals
• Familiarity with API debugging and tooling (e.g., Fiddler, Postman, browser developer tools)
• Knowledge of identity governance processes (access reviews, entitlement management, automated provisioning)
• Experience with logging and monitoring tools such as Application Insights, Azure Monitor, Log Analytics
• Understanding of Zero Trust architecture and its application to external identity
• Experience participating in incident management, including P1/P2 handling, root cause analysis, and post‑incident reviews