SSO Architect & Identity Lead
Urmi ValaUnited StatesSENIORPosted 6d ago
Ping IdentityOAuth 2.0OIDCSAML 2.0TerraformKubernetesGCPGKECI/CDMicrosoft Entra IDM365PythonPowerShellBash
About the Role
We are looking for a highly experienced SSO Architect & Identity Lead to lead enterprise authentication engineering, modernize identity infrastructure, and drive Zero Trust security initiatives in a large-scale healthcare environment.
Key Responsibilities
• Lead and mentor the SSO engineering squad in an Agile environment
• Architect and maintain highly available Ping Identity federation services
• Lead migration to PingOne Workforce Cloud
• Modernize authentication flows using OAuth 2.0, Authorization Code with PKCE, and adaptive MFA
• Design dynamic authentication journeys using PingOne DaVinci
• Automate identity infrastructure using Terraform, Kubernetes (GKE), and GCP CI/CD pipelines
• Integrate Microsoft Entra ID / M365 with enterprise federation services
• Support identity security across healthcare applications, SaaS platforms, and VDI environments
• Drive architecture governance, Zero Trust adoption, and fine-grained authorization strategies
Requirements
• 8+ years of dedicated IAM/SSO engineering experience
• 2+ years of engineering squad leadership experience
• Strong expertise in PingFederate, PingDirectory, PingID, PingOne Workforce/CIAM, and PingOne DaVinci
• Expert knowledge of SAML 2.0, OAuth 2.0, OIDC, JWT, SCIM, and FIDO2/WebAuthn
• Hands-on experience with GCP, Terraform, GKE, Docker, and CI/CD pipelines
• Scripting experience with Python, PowerShell, or Bash
• Experience with enterprise healthcare or regulated environments preferred