Zero-Trust Identity Platform Engineer

Capgemini Government Solutions; San Antonio (TX); On-site; USD 130,000 - 145,000; Full time

Job summary

Capgemini Government Solutions seeks an Identity Platform (IdP) Engineer to lead identity services that form the new perimeter of our enterprise. You will architect and administer PingFederate as core IdP, enabling secure, authenticated access across the organization.

You will partner with SOC and Network teams to integrate identity signals, deploy MFA/RBA, and ensure compliance with Zero Trust standards. A Secret clearance and 6+ years in ICAM are required for this role.

Qualifications

• Active Secret Government security clearance with U.S. citizenship.
• Bachelor's degree in computer science, information technology, cybersecurity, or related field.
• Minimum of 6 years of hands-on ICAM experience in enterprise or government settings.
• Deep proficiency with PingFederate (OIDC, SAML, OAuth).
• Strong experience with Ping Access for protecting web apps and APIs.

Responsibilities

• Design and implement identity-based access control policies adhering to Zero Trust principles.
• Lead deployment, configuration, and optimization of PingFederate and Ping Access for SSO and ABAC.
• Manage lifecycle of ICAM including provisioning and directory integrations.
• Collaborate with SOC and Network teams to integrate identity signals into security workflows.
• Act as SME for integrating PingFederate as IdP with PAM, MUR, and IGA.
• Create authentication policies including MFA and risk-based authentication.
• Knowledge of directory services (AD, LDAP, Azure AD).
• Familiarity with NIST 800-207 Zero Trust standards.
• Provide guidance and hands-on training for onboarding apps into PingFederate.

Skills

ICAM

Zero Trust

PingFederate

Ping Access

OIDC/SAML/OAuth

Directory services

Security clearance

Education

Bachelor's degree in Computer Science/IT/Cybersecurity

Tools

PingFederate

Ping Access

Active Directory

LDAP

Azure AD

Job description

Capgemini Government Solutions seeks an Identity Platform (IdP) Engineer to lead identity services that form the new perimeter of our enterprise. You will architect and administer PingFederate as core IdP, enabling secure, authenticated access across the organization.

You will partner with SOC and Network teams to integrate identity signals, deploy MFA/RBA, and ensure compliance with Zero Trust standards. A Secret clearance and 6+ years in ICAM are required for this role.