Zero-Trust IdP Architect & SSO Expert

Capgemini; San Antonio (TX); On-site; USD 110,000 - 125,000; Full time

Job summary

Capgemini Government Solutions (CGS) LLC seeks an Identity Provider (IdP) Engineer to join the Zero Trust Architecture team in San Antonio, TX. You will be the primary architect and administrator for identity services that form the new perimeter of our enterprise.

Responsibilities include deploying PingFederate and PingAccess for seamless SSO and ABAC, managing the ICAM lifecycle, and coordinating with SOC/Network teams.

Qualifications

• Active Secret Government security clearance requiring U.S. citizenship.
• Bachelor’s degree in computer science, Information Technology, Cybersecurity, or a related technical field.
• Minimum of six (6) years of hands-on experience in ICAM within enterprise or government environments.
• Deep proficiency with PingFederate (OIDC, SAML, OAuth protocols).
• Strong experience with PingAccess for protecting web applications and APIs at the gateway level.
• Active CompTIA Security+ (or equivalent IAT Level II certification) to meet compliance requirements.

Responsibilities

• Design and implement identity-based access control policies that adhere to Zero Trust principles (Never Trust, Always Verify).
• Lead the deployment, configuration, and optimization of PingFederate and PingAccess to provide seamless SSO and attribute-based access control (ABAC).
• Manage the full lifecycle of Identity, Credential, and Access Management (ICAM), including automated provisioning and complex directory integrations.
• Collaborate with the SOC and Network teams to integrate identity signals into our broader security monitoring and incident response workflows.
• Act as the subject matter expert for integrating PingFederate as the core Identity Provider (IdP) with third-party Zero Trust ecosystem components, including Privileged Access Manager (PAM), Master User Record (MUR) and Identity Governance and Administration (IGA).
• Create and maintain authentication policies, including Multi-Factor Authentication (MFA) and Risk-Based Authentication (RBA).
• Knowledge of directory services (Active Directory, LDAP, Azure AD).
• Familiarity with NIST 800-207 Zero Trust Architecture standards.
• A security-first mindset with the ability to troubleshoot complex authentication handshakes.
• Provide guidance and hands-on training for onboarding new applications into PingFederate using self-service templates, OIDC, and SAML to ensure consistent security standards across the enterprise.

Skills

PingFederate

PingAccess

ICAM

Zero Trust

Active Directory

LDAP

Azure AD

Security+

Education

Bachelor's degree in Computer Science / IT / Cybersecurity

Tools

Active Directory

LDAP

Azure AD

Job description

Capgemini Government Solutions (CGS) LLC seeks an Identity Provider (IdP) Engineer to join the Zero Trust Architecture team in San Antonio, TX. You will be the primary architect and administrator for identity services that form the new perimeter of our enterprise.

Responsibilities include deploying PingFederate and PingAccess for seamless SSO and ABAC, managing the ICAM lifecycle, and coordinating with SOC/Network teams.