Zero-Trust IdP Engineer (PingFederate) Remote

Capgemini Government Solutions LLC; United States; Remote; USD 110,000 - 125,000; Full time

Job summary

Capgemini Government Solutions LLC is seeking an Identity Provider (IdP) Engineer to lead the design, deployment and operation of identity services within a Zero Trust architecture. You will serve as the primary architect and administrator for authentication, authorization and encryption across the enterprise.

The role requires hands-on ICAM experience, expertise in PingFederate and PingAccess, and close collaboration with SOC and Network teams to integrate identity signals into security

Qualifications

• Bachelor’s degree in a related technical field or equivalent.
• Minimum of six (6) years hands-on ICAM experience in enterprise or government environments.
• Deep proficiency with PingFederate (OIDC, SAML, OAuth).

Responsibilities

• Design and implement identity-based access control policies per Zero Trust principles.
• Lead deployment, configuration, and optimization of PingFederate and PingAccess for SSO and ABAC.
• Manage full lifecycle of ICAM, including automated provisioning and directory integrations.
• Collaborate with SOC and Network teams to integrate identity signals into security workflows.
• Act as SME for PingFederate integration with PAM, MUR and IGA components.
• Create and maintain authentication policies including MFA and RBA.
• Knowledge of directory services (AD, LDAP, Azure AD).
• Familiarity with NIST 800-207 Zero Trust standards.
• Provide onboarding guidance for new applications using PingFederate templates, OIDC, and SAML.

Skills

ICAM

PingFederate

PingAccess

OIDC

SAML

ABAC

Zero Trust

Active Directory

Azure AD

Education

Bachelor’s degree

Tools

PingFederate

PingAccess

Job description

Capgemini Government Solutions LLC is seeking an Identity Provider (IdP) Engineer to lead the design, deployment and operation of identity services within a Zero Trust architecture. You will serve as the primary architect and administrator for authentication, authorization and encryption across the enterprise.

The role requires hands-on ICAM experience, expertise in PingFederate and PingAccess, and close collaboration with SOC and Network teams to integrate identity signals into security