Senior SSO Architect & Team Lead (Enterprise Identity & Zero Trust)

Smart IT Frame LLC • United State

Visa Sponsorship

Apply Now

AI Summary

Lead a high-availability SSO engineering team to modernize authentication for 70,000+ users, migrate to PingOne Workforce Cloud, and architect a Zero Trust ecosystem. Oversee PingFederate, OAuth 2.0, and SAML 2.0 integrations while ensuring HIPAA compliance and cloud-native DevOps automation on GCP. Direct cross-functional collaboration with Microsoft/M365, IAM, and security teams to replace legacy systems and enforce enterprise identity standards.

Key Highlights

Lead an Agile SSO engineering squad of 15+ years in enterprise identity and Zero Trust architecture

Migrate workforce authentication to PingOne Workforce Cloud and modernize authorization with PingAuthorize

Maintain 99.99%+ uptime for PingFederate, PingID, and CIAM integrations across healthcare and corporate endpoints

Key Responsibilities

Direct an SSO engineering squad in Agile/Scrum, mentoring developers and ensuring operational rigor

Lead migration to PingOne Workforce Cloud and modernize authorization systems (replacing Oracle Entitlement Server)

Maintain 24x7 high availability (99.99%+) for PingFederate, PingDirectory, and PingID in a healthcare/HIPAA environment

Collaborate with Microsoft/M365 team to integrate federation, PRT evaluation, and Conditional Access policies

Onboard clinical applications (Epic, Cerner) and enterprise SaaS platforms using SAML 2.0, OAuth 2.0, and OIDC

Standardize and automate cryptographic certificate management, token signing, and encryption keys

Architect dynamic identity orchestration workflows using PingOne DaVinci with adaptive MFA and passwordless auth

Drive GCP DevOps automation (Terraform, CI/CD, GKE) for identity services and developer self-service tools

Enforce DaVita SSO Enterprise Standards ('Configuration over Customization') and deprecate legacy ROPC grants

Partner with Enterprise Architecture and Security teams to align SSO roadmaps with enterprise blueprints

Searching for Devops roles that provide visa sponsorship? Connect with international employers through Devops Jobs with Visa Sponsorship opportunities actively seeking talented professionals.

Technical Skills Required

Identity & Access Management (IAM) and Single Sign-On (SSO) Ping Identity Suite (PingFederate, PingOne Workforce Cloud, PingOne DaVinci) OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and Microsoft Entra ID (Azure AD)

Benefits & Perks

All visa types accepted (C2C and W2)

12+ month contract duration

Explore our comprehensive directory of visa sponsorship jobs from employers worldwide who are ready to sponsor talented international professionals.

Nice to Have

Ping Identity Certified Professional / Architect (PingFederate / PingOne)

Microsoft Certified: Identity and Access Administrator (SC-300) or Cybersecurity Architect (SC-100)

Google Cloud Certified: Professional Cloud DevOps Engineer or Cloud Security Engineer

Certified Information Systems Security Professional (CISSP)

Experience with ABAC/PBAC, SCIM, FIDO2/WebAuthn, and Citrix VDI session policies

Job Description

Hello,

job Description: Senior SSO Architect & Team Lead

Location: Denver, CO /onsite

Duration: 12+ Months

All visa accepted

Job type: C2C and W2 BOTH

Experience: 15+ years

SSO Architect & Team Lead to direct our Single Sign-On engineering squad and serve as the technical authority for enterprise authentication. In this role, you will maintain high availability for our core Ping federation environment, lead our active migration to PingOne Workforce Cloud, and partner across architecture and security teams to build a modern, Zero Trust authentication ecosystem for 70,000+ corporate and clinical teammates across the Village.

Key Responsibilities

1. Team Leadership & Architecture Governance

Want the full job description? Read the complete details on LinkedIn, the original posting.

Continue on LinkedIn

This is a short excerpt. All rights to the full description belong to its original publisher.