Tranzeal, Inc.
Tranzeal, Inc.

Senior SSO Architect & Team Lead - Ping Identity

Remote • Posted 4 hours ago • Updated 4 hours ago
Contract W2
12 Months
Remote
Depends on Experience
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • PingFederate
  • PingID
  • PingDirectory
  • PingCentral
  • PingOne Workforce Cloud
  • PingOne Customer (CIAM)
  • PingOne DaVinci
  • SAML 2.0
  • OAuth 2.0
  • OIDC
  • JWT
  • SCIM
  • Microsoft 365 federation
  • Entra ID
  • Conditional Access
  • GCP
  • Terraform
  • GKE
  • Docker
  • CI/CD

Summary

<>Senior SSO Architect & Team Lead - Ping Identity
Role Overview

Seeking a hands-on Senior SSO Architect & Team Lead to lead the SSO engineering team, maintain a highly available enterprise Ping Identity environment, and drive migration to PingOne Workforce Cloud. The role focuses on enterprise authentication, identity orchestration, Zero Trust security, and cloud automation for 70,000+ corporate and clinical users.

Key Responsibilities

  • Lead and mentor the SSO engineering team and collaborate with Enterprise Architecture and Security teams.

  • Maintain high availability of PingFederate, PingDirectory, PingID, and enterprise federation services.

  • Lead migration to PingOne Workforce Cloud and modernize authentication architecture.

  • Design and manage application integrations using SAML 2.0, OAuth 2.0, OIDC, JWT, and SCIM.

  • Build identity orchestration workflows using PingOne DaVinci, adaptive MFA, and passwordless authentication.

  • Support authorization modernization, including PingAuthorize and replacement of legacy Oracle Entitlement Server (OES).

  • Collaborate on Microsoft 365 federation, Entra ID, Conditional Access, and hybrid identity.

  • Automate identity infrastructure using Google Cloud Platform, Terraform, GKE, Docker, CI/CD, and scripting.

  • Govern certificate/key lifecycle, session policies, and secure authentication standards.

Required Qualifications

  • 10+ years of hands-on IAM and enterprise SSO engineering experience.

  • 4+ years of technical leadership and team mentoring experience.

  • Deep expertise in PingFederate, PingID, PingDirectory, PingCentral, PingOne Workforce Cloud, PingOne Customer (CIAM), and PingOne DaVinci.

  • Strong knowledge of SAML, OAuth 2.0, OIDC, JWT, SCIM, PKCE, and modern authentication flows.

  • Understanding of authorization frameworks, ABAC/PBAC, and PingAuthorize.

  • Familiarity with Microsoft 365 federation, Entra ID, Conditional Access, Intune, and PRT.

  • Hands-on Google Cloud Platform, Terraform, Kubernetes/GKE, Docker, CI/CD, and Python, PowerShell, or Bash.

  • Experience supporting mission-critical, highly available environments; healthcare/HIPAA experience preferred.

  • Strong architecture governance, communication, and problem-solving skills.

Certifications

  • Ping Identity Professional/Architect

  • Microsoft SC-300 or SC-100

  • Google Cloud DevOps Engineer or Cloud Security Engineer

  • CISSP or CIAM

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10439527
  • Position Id: 9117537
  • Posted 4 hours ago
Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.
Remote jobs at Tranzeal, Inc.