Apply on Employer Site

Booz Allen Hamilton · 1 day ago

PING Federate Engineer

Reston, VA

Full-time

Hybrid

Senior Level

$87K/yr - $198K/yr

5+ years exp

Booz Allen Hamilton is a leading consulting firm specializing in cybersecurity and identity management. They are seeking a PING Federate Engineer to support large-scale Identity and Access Management (IAM) projects, analyze identity lifecycles, and implement enterprise-class solutions to secure user access. The role requires interfacing with stakeholders and engineering teams to manage user privileges and credentials effectively.

ConsultingCyber SecurityIT InfrastructureManagement ConsultingSecurity

Growth Opportunities

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Support large-scale IAM projects for our clients

Interface with stakeholders and engineering teams

Analyze the identity lifecycle

Articulate access requirements and define enterprise identity records

Design, deploy, and support systems that verify appropriate user privileges

Manage credentials for accessing clients’ assets

Implement enterprise-class solutions for single sign-on and privileged access systems

Qualification

Ping FederateSAML 2.0OAuth 2.0OpenID ConnectIdentity federationSingle Sign-OnRBACABACActive DirectoryLDAPZero TrustMFAAWSAzureGoogle CloudSCIMPythonPowerShellBashCloud-native IAM services

Required

5+ years of experience with Ping Federate, Okta, Entra ID, or ADFS

Experience with SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC)

Experience with Identity federation and Single Sign-On (SSO)

Experience with access control models such as RBAC and ABAC

Experience integrating IdPs with directory services such as Active Directory (AD) and LDAP, including synchronization and authentication workflows

Knowledge of Zero Trust architectures and implementation of password-less authentication or multifactor authentication (MFA) within the IdP environment

Ability to resolve complex identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems

Ability to design and operate IdP solutions across on-premises, hybrid, and cloud infrastructures, including AWS, Azure, or Google Cloud

Active TS/SCI clearance; willingness to take a polygraph exam

HS diploma or GED

Preferred

Experience implementing System for Cross-domain Identity Management (SCIM) protocols for automated user provisioning and lifecycle management between identity providers and applications

Experience with advanced platform features such as Okta Workflows, Ping Identity Suite advanced policy scripting, adaptive authentication, and the development of custom login pages

Experience with scripting languages such as Python, PowerShell, or Bash to automate IdP configuration, monitoring, and remediation tasks

Knowledge of cloud-native IAM services, including Azure Active Directory, AWS IAM, or Google Cloud Identity

TS/SCI clearance with a polygraph