We are looking for an engineer who combines enterprise authentication platform expertise (Auth‑E) with hands‑on Tableau Server/Cloud administration and end‑user support. You’ll own application onboarding to Auth‑E, keep authentication flows secure and reliable, and ensure our Tableau environment runs smoothly for analysts and business partners. The ideal candidate can move fluidly between identity engineering, platform operations, and customer support.

What you’ll do

Authentication engineering (Auth‑E)

• Onboard and integrate applications with Auth‑E, configuring SAML 2.0/OIDC/OAuth 2.0 flows, policies, and token lifecycles.

• Implement and support SSO for enterprise apps and Tableau (SAML/OIDC), including group‑based provisioning and role mapping.

• Troubleshoot authentication issues end‑to‑end (IdP, SP, redirects, claims, certs, clocks, network), perform log analysis, and drive root‑cause remediation.

• Partner with security, networking, and app teams on conditional access, risk‑based policies, device posture, and MFA enrollment/coverage.

• Document runbooks, change plans, and contribute to automation for consistency and speed.

Tableau administration and support

• Administer Tableau Server/Cloud: projects, permissions, sites, licensing, groups; manage SSO integration with Auth‑E.

• Monitor and tune performance (VizQL, backgrounders, caches), manage extract schedules, and optimize server topology.

• Support upgrades/patching, capacity planning, and migrations (e.g., to Tableau Cloud), including rollback plans and validation.

• Troubleshoot publisher and consumer issues, drivers/connectivity, and data source refresh failures; coordinate with data owners.

• Promote governance and best practices for workbooks and data sources; enable self‑service while safeguarding data access.

• Build/maintain operational dashboards and metrics (adoption, performance, incidents) and contribute to incident/problem management.

Operations and stakeholder engagement

• Provide timely L2/L3 support via ticketing and chat channels; maintain SLAs and clear communications with non‑technical users.

• Implement changes through change management (CAB), including risk assessments and post‑implementation reviews.

• Automate routine tasks using scripts/APIs; contribute to CI/CD and configuration as code where applicable.

• Uphold compliance with data protection, logging, and retention standards; support audits with evidence and documentation.

Required qualifications

• 3+ years in enterprise IAM or authentication engineering plus 2+ years in Tableau Server/Cloud administration and support.

Hands‑on experience with:

• SAML 2.0, OAuth 2.0, OIDC; configuring IdP/SP integrations, claims, signing/encryption, and metadata.

• Tableau Server/Cloud administration (2021.x+)

• Log analysis and monitoring tools (e.g., Splunk/ELK, CloudWatch/Log Analytics) and performance troubleshooting.

• Scripting for automation (PowerShell, Bash, Python) and working with REST/Graph APIs.

• Excellent communication skills, with the ability to translate technical issues for business audiences and drive resolution.

Preferred qualifications

• Experience integrating Auth‑E with BI/analytics platforms and mapping enterprise groups/roles to Tableau.

• Kerberos/NTLM, LDAP/AD, SCIM/Just‑in‑Time provisioning, and conditional access policies.

• Tableau Cloud administration and migrations from on‑prem Server; familiarity with Data Management Add‑On and Virtual Connections.

• SQL skills and familiarity with common data sources (Snowflake, Oracle, SQL Server, Redshift, BigQuery).

• ITIL fundamentals, incident/problem/change management; experience in regulated environments.