Senior SSO Architect & Identity Engineering Lead

Agile Resources, Inc.; Denver (CO); On-site; USD 140,000 - 190,000; Full time

Job summary

Agile Resources, Inc. is seeking a Senior SSO Architect & Team Lead to direct an identity engineering squad and act as the technical authority for enterprise authentication across a large healthcare environment.

You will oversee 24x7 high availability of core Ping federation infrastructure, lead a major cloud migration to PingOne Workforce Cloud, and partner with Enterprise Architecture and Security to build a modern, Zero Trust authentication ecosystem for 70,000+ users.

Qualifications

• 8+ years in enterprise IAM and SSO architecture/engineering.
• 2+ years guiding engineering squads and cross-functional collaboration.
• Experience maintaining high-availability identity infrastructure in regulated environments.
• Deep expertise with Ping Identity suite and DaVinci orchestration.
• Strong mastery of SAML, OAuth, OIDC, JWT, and SCIM; PKCE and modern grant flows.
• Knowledge of ABAC/PBAC and externalized authorization models.
• Familiarity with Microsoft Entra ID and Hybrid Identity concepts.
• Experience with cloud DevOps on GCP, IaC, and containerized deployments.

Responsibilities

• Lead, mentor, and technically direct the SSO engineering squad in an Agile setting.
• Align identity roadmaps with enterprise architecture and ARB reviews.
• Evaluate modern authorization engines and replace legacy policies.
• Collaborate with M365 and endpoint teams for seamless federation and login workflows.
• Maintain 24x7 HA for core identity infra (PingFederate, PingDirectory, PingID).
• Oversee cloud migration to PingOne Workforce Cloud and cloud-native identity modernization.
• Enforce enterprise SSO standards and governance for onboarding and architectures.
• Drive DaVinci orchestration, adaptive risk-based MFA, and passwordless auth initiatives.
• Lead CIAM/workforce integrations across CIAM platforms and SaaS apps.

Skills

Technical leadership

IAM expertise

SSO architecture

Agile/Scrum

Cross-functional collaboration

Tools

PingFederate

PingDirectory

PingID

PingOne Workforce Cloud

PingOne Customer

OAuth 2.0

OIDC

SAML 2.0

PKCE

JWT

SCIM

Azure Entra ID / Microsoft 365 federation

GCP

Terraform

Kubernetes (GKE)

CI/CD (GitLab/Jenkins)

Python / Bash / PowerShell

Job description

Agile Resources, Inc. is seeking a Senior SSO Architect & Team Lead to direct an identity engineering squad and act as the technical authority for enterprise authentication across a large healthcare environment.

You will oversee 24x7 high availability of core Ping federation infrastructure, lead a major cloud migration to PingOne Workforce Cloud, and partner with Enterprise Architecture and Security to build a modern, Zero Trust authentication ecosystem for 70,000+ users.