*Only W2 profiles*
Job Title: Senior Migration / Systems Engineer – IAM / SSO
Location: Livermore, CA
Work Arrangement: Hybrid – Onsite 3–4 Days per Week
Employment Type: Contract - W2
Job Description:
We are seeking an experienced Senior Migration / Systems Engineer with strong expertise in Identity and Access Management (IAM), Single Sign-On (SSO), and enterprise authentication technologies.
The ideal candidate will support a large-scale authentication integration migration initiative, transitioning existing identity federation integrations from PingFederate to Microsoft Entra ID (Azure Active Directory).
This role requires hands-on experience with enterprise identity platforms, authentication protocols, application integrations, and complex SSO migration activities.
Key Responsibilities:
Assess existing PingFederate integrations and identify migration requirements, technical gaps, risks, and dependencies.
Support the migration of approximately 1,600 production and non-production authentication integrations to Microsoft Entra ID.
Configure and manage Microsoft Entra application registrations, claims, attributes, permissions, authentication policies, and directory synchronization.
Develop repeatable migration approaches for SAML, OAuth, OIDC, WebLogic, Spring, Apache, and SaaS applications.
Collaborate with application owners and development teams to update, test, and validate authentication integrations.
Support migration activities across DEV, PRE-PROD, and PROD environments.
Troubleshoot complex authentication issues involving RSA dependencies, token exchanges, custom SAML configurations, and certificate-based authentication.
Support RSA authentication assessment and replacement planning.
Assist with secure testing procedures, privileged identities, administrative YubiKeys, PIV authentication, and access approvals.
Prepare technical documentation, architecture diagrams, implementation procedures, testing plans, rollback procedures, and migration-related documentation.
Required Skills:
Strong experience with Microsoft Entra ID (Azure Active Directory).
Hands-on experience with PingFederate or similar identity federation platforms.
Strong understanding of Identity and Access Management (IAM) and Single Sign-On (SSO).
Experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and LDAP.
Experience with application registrations, claims, attributes, permissions, and authentication policies.
Knowledge of certificate-based authentication, RSA authentication, PIV, and YubiKey.
Experience supporting enterprise application integrations and authentication migration projects.
Strong troubleshooting, analytical, and problem-solving skills.
Preferred Qualifications:
Experience with PingFederate-to-Microsoft Entra ID migrations.
Experience with Okta, ADFS, ForgeRock, or similar identity management platforms.
Knowledge of WebLogic, Spring, Apache, iWeb, and SaaS application integrations.
Experience with large-scale enterprise IAM / SSO migration programs.
Knowledge of privileged identity management and secure authentication practices.
Strong communication and collaboration skills.
Additional Information:
Hybrid work arrangement with 3–4 days onsite per week.
Must be able to work onsite in Livermore, CA.
Contract opportunity with potential for contract-to-hire.
Interested candidates with strong IAM, SSO, Microsoft Entra, PingFederate, and enterprise authentication migration experience are encouraged to apply.
