Datamatics Global Services, Inc.
Datamatics Global Services, Inc.

Principal SSO Architect & Identity Lead

Remote • Posted 4 hours ago • Updated 4 hours ago
Full Time
No Travel Required
Remote
Depends on Experience
Fitment

Dice Job Match Score™

🔢 Crunching numbers...

Job Details

Skills

  • IAM
  • Ping
  • SSO

Summary

< data-path-to-node="5">Role Overview

As the Principal SSO Architect & Identity Lead, you will direct the Single Sign-On engineering squad and serve as the technical authority for enterprise authentication. You will maintain high availability for core Ping federation services, lead the cloud migration to PingOne Workforce Cloud, and architect a modern Zero Trust identity ecosystem for 70,000+ teammates across corporate, clinical, and VDI environments.

< data-path-to-node="7">Key Responsibilities

  • Squad Leadership & Governance: Lead and mentor the SSO engineering squad in an Agile framework, align roadmaps with Enterprise Architecture, and represent SSO on Architecture Review Boards (ARB).

  • Tier-0 High Availability: Ensure 99.99%+ availability for enterprise federation infrastructure (PingFederate, PingDirectory, PingID, and PingOne CIAM) across clinical systems (Epic, Cerner, CWOW) and SaaS platforms.

  • Cloud Modernization & Orchestration: Lead migration to PingOne Workforce Cloud, deprecate legacy grants (ROPC to OAuth 2.0 Auth Code with PKCE), and architect dynamic user journeys using PingOne DaVinci and adaptive MFA.

  • Google Cloud Platform Cloud DevOps: Automate identity infrastructure deployment using Infrastructure as Code (Terraform), Kubernetes (GKE), and CI/CD pipelines on Google Cloud Platform.

  • Federation & Authorization Alignment: Partner with Microsoft/M365 teams on hybrid federation/Entra ID integration and evaluate modern authorization platforms (PingAuthorize).

< data-path-to-node="9">Key Qualifications

  • Experience: 8+ years in dedicated IAM/SSO engineering, with 2+ years leading engineering squads in enterprise healthcare or regulated environments.

  • Ping Identity Suite: Deep mastery of PingFederate, PingDirectory, PingID, PingOne Workforce/CIAM, and PingOne DaVinci.

  • Protocols & Standards: Expert-level SAML 2.0, OAuth 2.0, OIDC, JWT, SCIM, FIDO2/WebAuthn, and fine-grained authorization (ABAC/PBAC).

  • Cloud & DevOps: Hands-on Google Cloud Platform DevOps expertise (Terraform, GKE, Docker, CI/CD pipelines) and scripting proficiency (Python, PowerShell, Bash).

  • Preferred Certifications: Ping Identity Certified Architect, CISSP, SC-300 / SC-100, or Google Cloud Platform Professional Cloud Security Engineer

Employers have access to artificial intelligence language tools (“AI”) that help generate and enhance job descriptions and AI may have been used to create this description. The position description has been reviewed for accuracy and Dice believes it to correctly reflect the job opportunity.
  • Dice Id: 10107071
  • Position Id: 9117563
  • Posted 4 hours ago
Contact the job poster
Syed Haider

Syed Haider

Recruiter @ Datamatics Global Services, Inc.

View Profile
Create job alert
Never miss an opportunity! Create an alert based on the job you applied for.
Remote jobs at Datamatics Global Services, Inc.