Remote IAM Engineer — Zero Trust & SSO

Booz Allen Hamilton; United States; Hybrid; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Identity and Access Management specialist to design, deploy, and support enterprise IAM solutions across on-premises, hybrid, and cloud environments. You will work on Ping Identity related deployments, SSO, and privileged access controls while collaborating with stakeholders and engineering teams to ensure secure access across critical assets.

Ideal candidates have hands-on experience with Ping Federate, Entra ID, or ADFS, and strong knowledge of SSO, RBAC/ABAC,

Qualifications

• Experience with Ping Federate, Entra ID, or ADFS.
• Experience with SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience with Identity Federation and Single Sign-On (SSO).
• Experience with access control models such as RBAC and ABAC.
• Experience integrating IdPs with directory services such as Active Directory (AD) and LDAP, including synchronization and authentication workflows.
• Knowledge of Zero Trust architectures and implementation of password-less authentication or multifactor authentication (MFA) within the IdP environment.
• Ability to resolve complex identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems.
• Ability to design and operate IdP solutions across on-premises, hybrid, and cloud infrastructures, including AWS, Azure, or Google Cloud, and multiple Impact Levels.
• Secret clearance
• HS diploma or GED

Responsibilities

• Design, deploy, and support IAM systems to verify privileges and manage credentials.
• Analyze the identity lifecycle and define enterprise identity records.
• Implement enterprise-class IdP solutions including SSO and privileged access systems.
• Interface with stakeholders and engineering teams to map processes and requirements.

Skills

Ping Federate

Entra ID

ADFS

SAML 2.0

OAuth 2.0

OIDC

SSO

RBAC/ABAC

AD/LDAP integration

Zero Trust

Token validation issues

Education

HS diploma or GED

Tools

SCIM

Okta Workflows

Ping Identity Suite

Python

PowerShell

Bash

Azure AD

AWS IAM

Google Cloud Identity

Job description

Booz Allen Hamilton is seeking an Identity and Access Management specialist to design, deploy, and support enterprise IAM solutions across on-premises, hybrid, and cloud environments. You will work on Ping Identity related deployments, SSO, and privileged access controls while collaborating with stakeholders and engineering teams to ensure secure access across critical assets.

Ideal candidates have hands-on experience with Ping Federate, Entra ID, or ADFS, and strong knowledge of SSO, RBAC/ABAC,