Lead, mentor, and develop the SSO Engineering team, fostering a culture of technical excellence, accountability, and continuous learning
Own end-to-end design, implementation, and support of enterprise SSO services, including SAML, OAuth, OIDC, MFA, RADIUS, and application federation patterns
Oversee migration initiatives transitioning legacy platforms (e.g., IBM TFIM/WebSEAL, App Proxy) to modern architectures leveraging Azure Entra ID and PingFederate, PingDirectory, and PingOne
Establish reusable templates, standards, and patterns for integrating new applications into SSO platforms and improving onboarding efficiency
Partner closely with Cybersecurity, Azure Engineering, CIAM teams, and application owners to align identity solutions with regulatory, security, and Zero Trust requirements
Direct troubleshooting and resolution of complex authentication issues across multi-environment architectures
Drive automation and modernization initiatives (e.g., Power Automate/Logic Apps, infrastructure improvements, federation onboarding workflows)
Ensure compliance with enterprise controls, audit standards, and change management procedures
Perform other leadership and technical responsibilities as assigned
Requirements
Bachelor's Degree or 4+ additional years of equivalent experience
10+ years of related experience in Identity & Access Management or Information Security
3-5+ years of hands on experience with Ping Identity technologies (PingFederate, PingAccess, PingDirectory, PingOne MFA)
3+ years of experience integrating SSO and MFA solutions with enterprise applications using SAML, OAuth, and OIDC
3+ years of experience managing or leading technical engineering teams