Identity Provider Ops Engineer — Remote

Phase2 Technology; Reston (VA); On-site; USD 120,000 - 198,000; Full time

Job summary

Booz Allen is seeking an Identity Provider Operations Engineer to sustain enterprise IAM/federation platforms and support Zero Trust initiatives. You will monitor identity systems, resolve SSO and federation issues, and help implement MFA and password-less authentication, working with cybersecurity and IT teams to ensure secure access across mission systems.

The role requires experience with PingFederate/Okta/Entra ID, SAML/OAuth/OIDC, scripting for automation, and AD/LDAP integrations.

Qualifications

• Experience administering, supporting, and maintaining identity platforms in an enterprise operations environment.
• Experience troubleshooting SAML, OAuth, and OIDC integrations and federation connectivity issues.
• Experience scripting or automation to support IAM tasks, monitoring, patching, and maintenance procedures for IAM services.

Responsibilities

• Monitor identity systems and troubleshoot SSO/federation issues.
• Maintain MFA and password-less authentication capabilities.
• Support user lifecycle management processes and patching.
• Assist with operational automation and service improvements.
• Collaborate with cybersecurity and system teams to ensure IAM reliability.

Skills

Identity platforms

SSO/Federation

SAML 2.0

OAuth 2.0

OIDC

Scripting

REST APIs

AD/LDAP

Zero Trust

MFA

TS/SCI clearance

HS diploma or GED

Education

HS diploma or GED

Bachelor's degree in Computer Science, Cybersecurity, or Information Technology

Tools

PingFederate

PingAccess

PingDirectory

PingOne

Okta

Entra ID

Active Directory

Job description

Booz Allen is seeking an Identity Provider Operations Engineer to sustain enterprise IAM/federation platforms and support Zero Trust initiatives. You will monitor identity systems, resolve SSO and federation issues, and help implement MFA and password-less authentication, working with cybersecurity and IT teams to ensure secure access across mission systems.

The role requires experience with PingFederate/Okta/Entra ID, SAML/OAuth/OIDC, scripting for automation, and AD/LDAP integrations.