Zero-Trust Identity Engineer | PingFederate & SSO Specialist

Capgemini Government Solutions; San Antonio (TX); On-site; USD 130,000 - 145,000; Full time

Job summary

Capgemini Government Solutions (CGS) LLC seeks an Identity Provider Engineer to serve as the primary architect and administrator for enterprise identity services forming the new perimeter. You will bridge traditional networking with modern identity-centric security to ensure every access is fully authenticated, authorized, and encrypted.

You will design, deploy, and optimize PingFederate and Ping Access for seamless SSO, ABAC, and ICAM lifecycle management, collaborating with SOC and Network

Qualifications

• Active Secret Government security clearance requiring U.S. citizenship.
• Bachelor’s degree in computer science, information technology, cybersecurity, or related field.
• Minimum of 6 years of hands-on ICAM experience in enterprise or government environments.
• Deep proficiency with PingFederate (OIDC, SAML, OAuth).
• Strong experience with Ping Access for protecting web apps and APIs at the gateway.

Responsibilities

• Design and implement identity-based access control policies per Zero Trust principles.
• Lead deployment, configuration, and optimization of PingFederate and Ping Access for seamless SSO and ABAC.
• Manage the full lifecycle of ICAM including provisioning and directory integrations.
• Collaborate with SOC and Network teams to integrate identity signals into security workflows.
• Act as SME for integrating PingFederate as core IdP with PAM, MUR and IGA components.
• Create and maintain authentication policies including MFA and risk-based authentication.
• Knowledge of Active Directory, LDAP, and Azure AD.
• Familiarity with NIST 800-207 Zero Trust Architecture standards.
• Provide guidance and hands-on training for onboarding new apps into PingFederate via OIDC and SAML.

Skills

Zero Trust concepts

ICAM

Problem solving

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

PingFederate

Ping Access

Active Directory

LDAP

Azure AD

Job description

Capgemini Government Solutions (CGS) LLC seeks an Identity Provider Engineer to serve as the primary architect and administrator for enterprise identity services forming the new perimeter. You will bridge traditional networking with modern identity-centric security to ensure every access is fully authenticated, authorized, and encrypted.

You will design, deploy, and optimize PingFederate and Ping Access for seamless SSO, ABAC, and ICAM lifecycle management, collaborating with SOC and Network