Senior IAM Architect & SSO Team Lead — Enterprise Identity

Tranzeal Incorporated; Denver (CO); On-site; USD 150,000 - 190,000; Full time

Job summary

Tranzeal Incorporated in Denver seeks a hands-on Senior SSO Architect & Team Lead to steer the SSO engineering group and maintain a highly available Ping Identity environment for 70,000+ users.

Responsibilities include migrating to PingOne Workforce Cloud, designing modern authentication and identity orchestration, and automating cloud infrastructure with GCP, Terraform, Kubernetes, Docker and CI/CD pipelines.

Qualifications

• 10+ years IAM and enterprise SSO experience.
• 4+ years in technical leadership and mentoring.
• Deep expertise in PingFederate, PingID, PingDirectory, PingOne DaVinci, and PingOne CIAM.
• Strong knowledge of SAML, OAuth 2.0, OIDC, JWT, SCIM.
• Familiarity with Microsoft 365 federation, Entra ID, Conditional Access.

Responsibilities

• Lead and mentor the SSO engineering team and collaborate with Enterprise Architecture and Security teams.
• Maintain high availability of PingFederate, PingDirectory, PingID, and enterprise federation services.
• Lead migration to PingOne Workforce Cloud and modernize authentication architecture.
• Design and manage application integrations using SAML 2.0, OAuth 2.0, OIDC, JWT, and SCIM.
• Build identity orchestration workflows using PingOne DaVinci, adaptive MFA, and passwordless authentication.

Skills

SSO engineering leadership

Team mentoring

Enterprise IAM

Zero Trust security

Cloud automation

Tools

PingFederate

PingDirectory

PingID

PingOne DaVinci

Terraform

Kubernetes (GKE)

Docker

CI/CD

Google Cloud Platform

Python

PowerShell

Bash

Job description

Tranzeal Incorporated in Denver seeks a hands-on Senior SSO Architect & Team Lead to steer the SSO engineering group and maintain a highly available Ping Identity environment for 70,000+ users.

Responsibilities include migrating to PingOne Workforce Cloud, designing modern authentication and identity orchestration, and automating cloud infrastructure with GCP, Terraform, Kubernetes, Docker and CI/CD pipelines.