Identity Platform Ops Engineer

Booz Allen Hamilton; Northern (KY); Hybrid; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Identity Provider Operations Engineer to support enterprise IAM and federation services across mission environments. You will monitor, troubleshoot, and maintain SSO, MFA, and password-less auth while coordinating with cybersecurity, admins, and stakeholders.

Applicants should have hands-on experience with PingFederate/Okta/Entra ID, SAML/OIDC/OAuth, REST APIs, and AD/LDAP integrations, and hold TS/SCI clearance or be eligible. This is a full-time role.

Qualifications

• Experience administering, supporting, and maintaining identity platforms in an enterprise operations environment.
• Experience supporting and troubleshooting authentication and federation protocols including SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience troubleshooting SAML, OAuth, and OIDC integrations, token exchanges, assertion mismatches, and federation connectivity issues.
• Experience using scripting or automation languages to support operational tasks, automation, and maintenance activities for IAM services.
• Experience working with RESTful APIs to support identity platform integrations and user lifecycle management.
• Experience supporting integrations with Active Directory/LDAP environments.
• Knowledge of Zero Trust architectures and MFA/passwordless authentication.
• Ability to diagnose and resolve complex identity and federation operational issues in production environments.
• Top Secret clearance
• HS diploma or GED

Responsibilities

• Monitor identity systems and troubleshoot SSO/federation issues.
• Maintain MFA and passwordless authentication capabilities.
• Support user lifecycle management and patches for IAM services.
• Assist with automation, tooling, and service improvements.
• Work with AD/LDAP integrations and REST APIs to enable IAM workflows.

Skills

IAM operations

Scripting (Python, PowerShell)

REST APIs

Active Directory/LDAP

Zero Trust

MFA/passwordless

SSO troubleshooting

Communication skills

Education

HS diploma or GED

Bachelor’s degree in Computer Science, Cybersecurity, or IT (preferred)

Tools

PingFederate

Okta

Entra ID

AD/LDAP

RESTful APIs

SCIM

Job description

Booz Allen Hamilton is seeking an Identity Provider Operations Engineer to support enterprise IAM and federation services across mission environments. You will monitor, troubleshoot, and maintain SSO, MFA, and password-less auth while coordinating with cybersecurity, admins, and stakeholders.

Applicants should have hands-on experience with PingFederate/Okta/Entra ID, SAML/OIDC/OAuth, REST APIs, and AD/LDAP integrations, and hold TS/SCI clearance or be eligible. This is a full-time role.