IAM & SSO Engineer - PingFederate Expert

Apex Systems; Denver (CO); On-site; USD 120,000 - 150,000; Full time

Job summary

Everforth Apex Systems seeks an experienced SSO Engineer to design, implement, and maintain secure authentication services. This hands-on role emphasizes Ping Identity products and IAM across enterprise systems in a dynamic environment.

The ideal candidate has 5+ years in IAM, with strong knowledge of SAML, OIDC, OAuth, and FIDO2, plus Linux scripting and policy work. On-site Denver location with opportunities to influence architecture and security posture.

Qualifications

• 5+ years IAM experience in a large corporate environment.
• Hands-on experience integrating applications using SAML, OIDC, OAuth, and FIDO2.
• Linux programming and policy implementation.

Responsibilities

• Provide SME-level consultation to SSO Integration and Engineering teams on authentication solutions, including configuration, customization, and integration.
• Collaborate with cross-functional teams to implement authentication solutions using PingFederate, PingAccess, PingDirectory, and other relevant tools.
• Design new features or improve existing ones, and identify process improvement opportunities for review and implementation.
• Ensure Authentication Services comply with industry standards and best practices, such as SAML, OAuth, FIDO2, and OIDC.
• Investigate and resolve Authentication Services-related issues, including authentication failures, token management, and user provisioning.
• Provide advanced troubleshooting support to identify root causes and implement bug fixes when needed.
• Create detailed technical documentation for configurations, workflows, and troubleshooting guides using Jira or Confluence.
• Handle a structured environment that can have brief periods of chaos, with priorities that can shift hour to hour.

Skills

IAM expertise

SAML/OIDC/OAuth

PingFederate

PingAccess

PingDirectory

Linux

Education

Bachelor's degree (optional)

Tools

PingFederate

PingAccess

PingDirectory

Job description

Everforth Apex Systems seeks an experienced SSO Engineer to design, implement, and maintain secure authentication services. This hands-on role emphasizes Ping Identity products and IAM across enterprise systems in a dynamic environment.

The ideal candidate has 5+ years in IAM, with strong knowledge of SAML, OIDC, OAuth, and FIDO2, plus Linux scripting and policy work. On-site Denver location with opportunities to influence architecture and security posture.