Senior SSO Architect & Team Lead

Job Description

Job Title: Senior SSO Architect & Team Lead

\n

Location: Denver, CO / Remote

\n

\n

Job Description

\n

We are looking for an experienced Senior SSO Architect & Team Lead to lead enterprise Single Sign-On (SSO) engineering, manage Ping Identity solutions, and support the migration to PingOne Workforce Cloud. The ideal candidate should have strong hands-on IAM expertise, technical leadership experience, and knowledge of cloud-based identity modernization.

\n

Key Responsibilities

\n

\n
• Lead and mentor the SSO engineering team and guide technical architecture decisions.

\n

• Manage and support PingFederate, PingDirectory, PingID, PingOne, and PingOne DaVinci.

\n

• Design and maintain enterprise SSO and federation integrations using SAML 2.0, OAuth 2.0, OIDC, JWT, and SCIM.

\n

• Lead workforce authentication migration to PingOne Workforce Cloud.

\n

• Develop identity orchestration workflows, adaptive MFA, and passwordless authentication solutions.

\n

• Support Microsoft 365 federation, hybrid identity, and Conditional Access integrations.

\n

• Improve authentication security, certificate management, and high availability.

\n

• Support cloud DevOps automation using GCP, Terraform, Kubernetes, Docker, and CI/CD pipelines.

\n

• Collaborate with security, architecture, and application teams to implement enterprise IAM standards.

\n

\n

\n

Required Qualifications

\n

\n
• 8+ years of experience in IAM and enterprise SSO engineering.

\n

• 2+ years of technical leadership or engineering team lead experience.

\n

• Strong hands-on experience with PingFederate, Ping Identity, and PingOne DaVinci.

\n

• Expertise in SAML, OAuth 2.0, OpenID Connect (OIDC), JWT, and SCIM.

\n

• Experience with PingOne Workforce Cloud and identity federation.

\n

• Knowledge of Microsoft Entra ID/Azure AD, Microsoft 365 federation, MFA, and session management.

\n

• Hands-on experience with GCP, Terraform, Kubernetes/GKE, Docker, and CI/CD automation.

\n

• Strong communication, troubleshooting, and technical mentoring skills.

\n

\n

\n

Preferred: Healthcare or HIPAA experience, Ping Identity certifications, Microsoft identity certifications, GCP certifications, or CISSP.