SSO Engineer

Job Description

This role focuses on SSO engineering for divestiture-related migration of Ping Federate instances, ensuring secure integration, compliance, and operational excellence.

• Drive development and execution strategies for the secure separation, migration, and integration of Ping Federate instances, configurations, and associated identity stores for divested business units.
• Plan and implement identity federation solutions to support application access for users transitioning between organizations, ensuring minimal disruption.
• Manage the lifecycle of federated trusts, connections, and identity providers/service providers in the context of divestiture, including onboarding and offboarding applications.
• Design, deploy, configure, and maintain high‑availability Ping Federate environments across various enterprise landscapes.
• Administer Ping Federate connections, policies, adapters, selectors, and authentication methods (e.g., SAML, OAuth, OIDC).
• Troubleshoot complex SSO authentication, authorization, and federation issues to ensure continuous service availability.
• Integrate Ping Federate with various identity stores such as Active Directory, Azure Active Directory, and LDAP directories.
• Collaborate with application owners to onboard new applications and migrate existing ones to the Ping Federate SSO platform.
• Ensure seamless integration with Multi‑Factor Authentication (MFA) solutions.
• Implement and enforce security best practices and architectural guidelines for identity federation and SSO solutions.
• Ensure that SSO configurations comply with corporate security policies, regulatory requirements, and data governance standards during the divestiture process.
• Conduct regular security reviews and vulnerability assessments of the Ping Federate environment.
• Provide expert‑level support for SSO‑related incidents and requests, often collaborating with cross‑functional IT and security teams.
• Develop and maintain comprehensive documentation, architectural diagrams, runbooks, and standard operating procedures (SOPs) for the SSO infrastructure.

• Secure divestiture and federated identity transition.
• Resilient Ping Federate and SSO platform operations.
• Security, compliance, and operational excellence.

• Bachelor’s degree in computer science, information security, or a related technical field, or equivalent practical experience.
• 5+ years of dedicated experience in identity and access management (IAM), with at least 3 years focused specifically on SSO technologies.
• Proficiency in designing, implementing, and managing Ping Federate in large‑scale enterprise environments.
• Understanding and hands‑on experience with identity federation protocols such as SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience integrating SSO solutions with various applications and identity stores (e.g., Active Directory, Azure AD, LDAP).
• Proficiency in scripting languages (e.g., Power Shell, Python) for automation and administration tasks.
• Excellent analytical, problem‑solving, and communication skills, with the ability to articulate complex technical concepts to both technical and non‑technical audiences.
• Required:
  
  English fluency (oral and written).

Salary Range: $90,000 to $115,000 per year