Identity Management Consultant

Stefanini LATAM; México; On-site; MXN 550,000 - 1,000,000; Full time

Job summary

Stefanini LATAM is seeking an experienced IAM engineer to design, implement, and maintain secure PingFederate environments in enterprise settings.

You will lead SSO and identity federation activities, integrate with Active Directory, Azure AD, LDAP, MFA, and automate tasks with PowerShell or Python.

The role requires a BS in CS or related field, 4 years of IAM experience with SSO, and advanced English; knowledge of SAML, OAuth, and OIDC is essential.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 4 years of experience in Identity and Access Management (IAM), including at least one focused on Single Sign-On (SSO).
• Hands-on experience implementing, configuring, and managing PingFederate in enterprise environments.
• Strong knowledge of identity federation protocols, including SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience integrating SSO solutions with Active Directory, Microsoft Entra ID (Azure AD), LDAP, and Multi-Factor Authentication (MFA) solutions.
• Experience managing identity federation, application onboarding, authentication policies, and troubleshooting complex SSO issues.
• Proficiency in PowerShell or Python for scripting and automation.
• Knowledge of identity security best practices, high-availability environments, and enterprise security compliance.
• Experience with identity migration, corporate divestitures, or enterprise separation projects is a strong plus.
• Advanced English proficiency, both written and spoken.

Responsibilities

• Design, implement, configure, and maintain secure, scalable, and highly available PingFederate environments.
• Lead SSO and identity federation activities during corporate divestitures, including identity separation, migration, and integration.
• Configure and manage federation connections, identity providers, service providers, authentication policies, adapters, and selectors.
• Integrate PingFederate with enterprise applications, identity stores, directories, and MFA solutions.
• Implement and maintain SAML 2.0, OAuth 2.0, and OIDC authentication and federation workflows.
• Troubleshoot complex authentication, authorization, and connectivity issues to ensure service availability and minimize business disruption.
• Apply security best practices and ensure compliance with corporate security policies and applicable regulatory requirements.
• Automate administrative and operational tasks using PowerShell or Python.
• Collaborate with application owners, infrastructure teams, and cybersecurity stakeholders to deliver secure identity solutions.
• Maintain technical documentation, architecture diagrams, operational procedures, and incident-resolution guidelines.

Skills

IAM experience

SSO technologies

PingFederate

Identity federation

SAML 2.0

OAuth 2.0

OIDC

Azure AD

LDAP

MFA integration

PowerShell

Python scripting

Security best practices

High availability

English proficiency

Education

Bachelor’s degree in CS/InfoSec

Tools

PingFederate

Job description

At Stefanini we are more than 30,000 geniuses, connected from more than 40 countries, we co-create a better future.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent practical experience.
• 4 years of experience in Identity and Access Management (IAM), including at least one of them focused on Single Sign-On (SSO) technologies.
• Hands-on experience implementing, configuring, and managing PingFederate in enterprise environments.
• Strong knowledge of identity federation protocols, including SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience integrating SSO solutions with Active Directory, Microsoft Entra ID (Azure AD), LDAP, and Multi-Factor Authentication (MFA) solutions.
• Experience managing identity federation, application onboarding, authentication policies, and troubleshooting complex SSO issues.
• Proficiency in PowerShell or Python for scripting and automation.
• Knowledge of identity security best practices, high-availability environments, and enterprise security compliance.
• Experience with identity migration, corporate divestitures, or enterprise separation projects is a strong plus.
• Advanced English proficiency, both written and spoken.

Responsibilities

• Design, implement, configure, and maintain secure, scalable, and highly available PingFederate environments.
• Lead SSO and identity federation activities during corporate divestitures, including identity separation, migration, and integration.
• Configure and manage federation connections, identity providers, service providers, authentication policies, adapters, and selectors.
• Integrate PingFederate with enterprise applications, identity stores, directories, and MFA solutions.
• Implement and maintain SAML 2.0, OAuth 2.0, and OIDC authentication and federation workflows.
• Troubleshoot complex authentication, authorization, and connectivity issues to ensure service availability and minimize business disruption.
• Apply security best practices and ensure compliance with corporate security policies and applicable regulatory requirements.
• Automate administrative and operational tasks using PowerShell or Python.
• Collaborate with application owners, infrastructure teams, and cybersecurity stakeholders to deliver secure identity solutions.
• Maintain technical documentation, architecture diagrams, operational procedures, and incident-resolution guidelines.