Remote Identity Provider Operations Engineer

Booz Allen Hamilton; Riverdale Park (MD); On-site; USD 87,000 - 198,000; Full time

Job summary

Booz Allen Hamilton is seeking an Identity Provider Operations Engineer to sustain enterprise IAM and federation services. You will monitor, troubleshoot, and maintain authentication platforms powering mission-critical environments while aligning with Zero Trust principles.

Collaboration with cybersecurity, sysadmin, and network teams is required to ensure secure access. The role emphasizes reliability, security, and operational readiness of IAM/ federation platforms, with opportunities to

Qualifications

• Experience administering identity platforms such as PingFederate, Okta, or Entra ID in an enterprise environment.
• Experience supporting and troubleshooting authentication and federation protocols including SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience troubleshooting SAML, OAuth, and OIDC integrations, token exchanges, assertion mismatches, and federation connectivity.
• Experience scripting in Java, JavaScript, Python, PowerShell, or Groovy for IAM tasks, automation, and maintenance.
• Experience with RESTful APIs to support identity integrations and user lifecycle management.
• Experience integrating with AD/LDAP environments; knowledge of MFA and password-less options.
• Ability to diagnose and resolve complex identity/federation issues in production; Top Secret clearance; HS diploma or GED.
• Nice to have Ping Identity Suite tools, SCIM, and DevOps/CI/CD IAM integrations; cloud identity knowledge.

Responsibilities

• Monitor identity systems and troubleshoot SSO and federation issues.
• Maintain MFA and password-less authentication capabilities.
• Support user lifecycle management processes and patching tasks.
• Apply patches and configuration updates; assist with automation and service improvements.
• Ensure compliance with security policies and enterprise standards.

Skills

PingFederate

Okta

Entra ID

SAML 2.0

OAuth 2.0

OpenID Connect

Java

JavaScript

Python

PowerShell

Groovy

RESTful APIs

Active Directory

LDAP

MFA

Password-less authentication

Prod issue diagnosis

TS/SCI clearance

Top Secret clearance

Education

HS diploma or GED

Bachelor's degree in Computer Science, Cybersecurity, or Information Technology

Tools

PingFederate

PingAccess

PingDirectory

PingOne

Job description

Booz Allen Hamilton is seeking an Identity Provider Operations Engineer to sustain enterprise IAM and federation services. You will monitor, troubleshoot, and maintain authentication platforms powering mission-critical environments while aligning with Zero Trust principles.

Collaboration with cybersecurity, sysadmin, and network teams is required to ensure secure access. The role emphasizes reliability, security, and operational readiness of IAM/ federation platforms, with opportunities to