Zero Trust IdP Engineer | PingFederate & ICAM Expert

Capgemini; San Antonio (TX); On-site; USD 110,000 - 170,000; Full time

Job summary

Capgemini is seeking an Identity Provider (IdP) Engineer to join its Zero Trust Architecture team in the United States. You will architect and administer identity services forming the new perimeter of our enterprise, ensuring fully authenticated and authorized access across systems.

You will lead PingFederate and Ping Access deployments, manage ICAM lifecycle, and collaborate with SOC and Network teams to integrate identity signals into security workflows.

Qualifications

• Active Secret Government clearance requiring U.S. citizenship.
• Bachelor's degree in CS/IT/Cybersecurity or related field.
• Minimum 6 years' ICAM experience in enterprise or government environments.
• Deep proficiency with PingFederate (OIDC, SAML, OAuth).
• Strong Ping Access experience protecting web apps and APIs.
• Active CompTIA Security+ (IAT Level II) certification.

Responsibilities

• Design and implement identity-based access controls in a Zero Trust framework.
• Lead deployment and optimization of PingFederate and Ping Access for SSO and ABAC.
• Manage ICAM lifecycle including automated provisioning and directory integrations.
• Collaborate with SOC and Network teams to integrate identity signals into security workflows.
• Provide guidance for onboarding applications with PingFederate, including OIDC and SAML templates.

Skills

ICAM

PingFederate

Ping Access

MFA

SAML/OAuth/OIDC

Zero Trust

Directory services

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Active Directory

LDAP

Azure AD

Job description

Capgemini is seeking an Identity Provider (IdP) Engineer to join its Zero Trust Architecture team in the United States. You will architect and administer identity services forming the new perimeter of our enterprise, ensuring fully authenticated and authorized access across systems.

You will lead PingFederate and Ping Access deployments, manage ICAM lifecycle, and collaborate with SOC and Network teams to integrate identity signals into security workflows.