Identity Platform Architect, Zero Trust & SSO

Capgemini Government Solutions; San Antonio (TX); On-site; USD 110,000 - 125,000; Full time

Benefits offered by this job

Paid time off

Medical/dental/vision insurance

401(k)

Job summary

Capgemini Government Solutions is seeking an Identity Platform (IdP) Engineer to join our Zero Trust Architecture team. You will be the primary architect and administrator for identity services that form the 'new perimeter' of our enterprise.

You will bridge the gap between traditional networking and modern identity-centric security, ensuring that every access request is fully authenticated, authorized, and encrypted.

Qualifications

• Active Secret Government security clearance required; US citizenship.
• Bachelor's degree in computer science, IT, cybersecurity, or related field.
• Minimum 6 years of hands-on ICAM experience in enterprise/government environments.
• Deep proficiency with PingFederate (OIDC, SAML, OAuth).
• Strong experience with PingAccess for web apps and APIs gateway.
• Active CompTIA Security+ or equivalent IAT Level II certification.

Responsibilities

• Design and implement IdP-based access control policies per Zero Trust.
• Deploy and optimize PingFederate and PingAccess for SSO and ABAC.
• Manage ICAM lifecycle including automated provisioning and directory integration.
• Collaborate with SOC and Network teams to integrate identity signals into security monitoring.
• Act as SME for integrating PingFederate with PAM, MUR and IGA components.
• Create and maintain authentication policies including MFA and RBA.
• Guide onboarding of new apps via PingFederate templates, OIDC, and SAML.

Skills

PingFederate

PingAccess

ICAM

Zero Trust

OIDC

SAML

MFA

RBA

Active Directory

Azure AD

Security clearance

US citizenship

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

PingFederate

PingAccess

Directory services

Job description

Capgemini Government Solutions is seeking an Identity Platform (IdP) Engineer to join our Zero Trust Architecture team. You will be the primary architect and administrator for identity services that form the 'new perimeter' of our enterprise.

You will bridge the gap between traditional networking and modern identity-centric security, ensuring that every access request is fully authenticated, authorized, and encrypted.