Zero-Trust Identity Provider Engineer

Capgemini Government Solutions

San Antonio (TX)

On-site

USD 110,000 - 125,000

Full time

10 days ago

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Benefits offered by this job

Salary range disclosed

Security clearance support

Job summary

Capgemini Government Solutions is seeking an Identity Provider (IdP) Engineer to join our Zero Trust Architecture team in the United States. You will design and implement identity services that form the new perimeter, bridging traditional networking and modern identity-centric security.

You will lead deployments of PingFederate and PingAccess to enable seamless SSO and ABAC, manage the full ICAM lifecycle with automated provisioning and directory integrations, and collaborate with SOC and

Qualifications

Active government security clearance requiring U.S. citizenship.
Bachelor's degree in computer science, information technology, cybersecurity, or a related field.
Minimum of six years of hands-on ICAM experience in enterprise or government environments.
Deep proficiency with PingFederate (OIDC, SAML, OAuth).
Strong experience with PingAccess for protecting web applications and APIs.

Responsibilities

Design and implement identity-based access control policies in line with Zero Trust (Never Trust, Always Verify).
Lead deployment, configuration, and optimization of PingFederate and PingAccess for seamless SSO and ABAC.
Manage full ICAM lifecycle, including automated provisioning and directory integrations.
Collaborate with SOC and Network teams to integrate identity signals into security operations.
Act as SME for PingFederate integration with third-party Zero Trust components (PAM, MUR, IGA).
Create and maintain authentication policies, including MFA and Risk-Based Authentication (RBA).
Knowledge of directory services (Active Directory, LDAP, Azure AD).
Familiarity with NIST 800-207 Zero Trust standards.