Job Title: Senior SSO Architect - PingFederate/ PingOne Location: Denver, CO / Remote
Job Description We are looking for an experienced Senior SSO Architect & Team Lead to lead enterprise Single Sign-On (SSO) engineering, manage Ping Identity solutions, and support the migration to PingOne Workforce Cloud. The ideal candidate should have strong hands-on IAM expertise, technical leadership experience, and knowledge of cloud-based identity modernization. Key Responsibilities Lead and mentor the SSO engineering team and guide technical architecture decisions. Manage and support PingFederate, PingDirectory, PingID, PingOne, and PingOne DaVinci. Design and maintain enterprise SSO and federation integrations using SAML 2.0, OAuth 2.0, OIDC, JWT, and SCIM. Lead workforce authentication migration to PingOne Workforce Cloud. Develop identity orchestration workflows, adaptive MFA, and passwordless authentication solutions. Support Microsoft 365 federation, hybrid identity, and Conditional Access integrations. Improve authentication security, certificate management, and high availability. Support cloud DevOps automation using GCP, Terraform, Kubernetes, Docker, and CI/CD pipelines. Collaborate with security, architecture, and application teams to implement enterprise IAM standards.
Required Qualifications
8+ years of experience in IAM and enterprise SSO engineering.
2+ years of technical leadership or engineering team lead experience.
Strong hands-on experience with PingFederate, Ping Identity, and PingOne DaVinci.
Expertise in SAML, OAuth 2.0, OpenID Connect (OIDC), JWT, and SCIM.
Experience with PingOne Workforce Cloud and identity federation.
Knowledge of Microsoft Entra ID/Azure AD, Microsoft 365 federation, MFA, and session management.
Hands-on experience with GCP, Terraform, Kubernetes/GKE, Docker, and CI/CD automation.
Strong communication, troubleshooting, and technical mentoring skills.
Preferred: Healthcare or HIPAA experience, Ping Identity certifications, Microsoft identity certifications, GCP certifications, or CISSP.
Senior Architect I - Remote in denver at Unknown Company
This position is listed as full time and able to be worked remotely.