Senior SSO Architect & Team Lead
Hiring: Senior SSO Architect & Team Lead Work Mode: Fully Remote We are seeking an experienced Senior SSO Architect & Team Lead to lead enterprise SSO engineering, maintain mission-critical authentication services, and drive the migration from on-premises PingFederate to PingOne Workforce Cloud. Must-Have Skills & Experience 8+ years of dedicated Identity & Access Management (IAM) and enterprise SSO engineering experience. 2+ years of technical leadership experience, including mentoring engineers and collaborating with Enterprise and Security Architecture teams. Ping Identity: Strong hands-on expertise in PingFederate, PingID, PingDirectory, PingCentral, PingOne Workforce Cloud, and PingOne DaVinci. Ping Cloud Migration: Experience migrating enterprise workforce authentication from on-premises PingFederate to PingOne Workforce Cloud. Identity Orchestration: Hands-on PingOne DaVinci workflow design and authentication orchestration. Federation Protocols: Expert knowledge of SAML 2.0, OAuth 2.0, OIDC, JWT, SCIM, and OAuth Authorization Code with PKCE. GCP & DevOps: Hands-on experience with GCP, Terraform, GKE/Kubernetes, Docker, CI/CD pipelines, REST APIs, and Python, PowerShell, or Bash scripting. Experience supporting highly available, mission-critical enterprise authentication environments. Preferred Skills PingOne Customer (CIAM) and PingAuthorize; knowledge of ABAC/PBAC and legacy authorization modernization. Microsoft 365 federation, Entra ID (Azure AD), Conditional Access, Hybrid Identity, and PRT. Adaptive MFA, FIDO2/WebAuthn, passwordless authentication, and identity risk-based workflows. Experience with shared workstations, Citrix VDI, certificate lifecycle automation, and legacy authentication remediation. Healthcare and HIPAA compliance experience. Relevant certifications: Ping Identity, Microsoft SC-300/SC-100, Google Cloud, CISSP, or CIAM. Interested? Please share your updated resume or reach out directly to discuss this opportunity.