Senior IAM Architect & SSO Lead

Title: Senior SSO Architect & Team Lead Opportunity Schedule - 100% Remote Address: 2000 16th Street, 05555 Denver CO 80202 United States Duration: 12 months (Possible Extension) Payrate: $72.00/hr. on W2

Job Description

We are seeking an experienced Senior IAM Architect & SSO Lead to lead enterprise SSO engineering, oversee Ping Identity infrastructure, and drive identity modernization initiatives, including migration to PingOne Workforce Cloud. The ideal candidate combines deep technical expertise with team leadership and experience building secure, scalable, high-availability authentication solutions.

Key Responsibilities

Lead and mentor the SSO engineering team and establish technical standards. Manage and optimize PingFederate, PingDirectory, PingID, PingCentral, and PingOne integrations. Drive PingOne Workforce Cloud migration and identity orchestration using PingOne DaVinci. Implement and troubleshoot SAML 2.0, OAuth 2.0, OIDC, JWT, SCIM, MFA, and modern authentication flows. Collaborate with security, architecture, and Microsoft teams on federation and Zero Trust initiatives. Automate identity infrastructure using GCP, Terraform, Kubernetes, and CI/CD pipelines. Maintain high availability, strengthen security, and improve authentication reliability. Required Qualifications 8+ years of IAM/SSO engineering experience, including 2+ years in technical leadership. Strong hands-on experience with Ping Identity products, especially PingFederate and PingOne. Expertise in federation protocols, identity architecture, and authentication modernization. Familiarity with Microsoft Entra ID, Microsoft 365 federation, and Conditional Access. Experience with GCP, Terraform, Kubernetes, CI/CD, and scripting using Python, PowerShell, or Bash. Healthcare or HIPAA experience is a plus. Preferred Certifications Ping Identity, Microsoft SC-300/SC-100, Google Cloud, CISSP, or CIAM certifications.