Live opening · Posted 11 hours ago
Senior SSO Architect & Team Lead - Ping Identity
Tranzeal Incorporated · Denver Metropolitan Area (Remote)
JobBeeper subscribers received an alert for this role.
At a glance
The key details from the original listing.
CompanyTranzeal Incorporated
LocationDenver Metropolitan Area (Remote)
Work modeYes
SkillsPython, GCP, Docker, Kubernetes, Terraform
Source
Linkedin
ListedPosted 11 hours ago
About the role
Description supplied by the original job listing.
Senior SSO Architect & Team Lead - Ping Identity
Role Overview
Seeking a hands-on Senior SSO Architect & Team Lead to lead the SSO engineering team, maintain a highly available enterprise Ping Identity environment, and drive migration to PingOne Workforce Cloud. The role focuses on enterprise authentication, identity orchestration, Zero Trust security, and cloud automation for 70,000+ corporate and clinical users.
Key Responsibilities
Lead and mentor the SSO engineering team and collaborate with Enterprise Architecture and Security teams.
Maintain high availability of PingFederate, PingDirectory, PingID, and enterprise federation services.
Lead migration to PingOne Workforce Cloud and modernize authentication architecture.
Design and manage application integrations using SAML 2.0, OAuth 2.0, OIDC, JWT, and SCIM.
Build identity orchestration workflows using PingOne DaVinci, adaptive MFA, and passwordless authentication.
Support authorization modernization, including PingAuthorize and replacement of legacy Oracle Entitlement Server (OES).
Collaborate on Microsoft 365 federation, Entra ID, Conditional Access, and hybrid identity.
Automate identity infrastructure using Google Cloud Platform, Terraform, GKE, Docker, CI/CD, and scripting.
Govern certificate/key lifecycle, session policies, and secure authentication standards.
Required Qualifications
10+ years of hands-on IAM and enterprise SSO engineering experience.
4+ years of technical leadership and team mentoring experience.
Deep expertise in PingFederate, PingID, PingDirectory, PingCentral, PingOne Workforce Cloud, PingOne Customer (CIAM), and PingOne DaVinci.
Strong knowledge of SAML, OAuth 2.0, OIDC, JWT, SCIM, PKCE, and modern authentication flows.
Understanding of authorization frameworks, ABAC/PBAC, and PingAuthorize.
Familiarity with Microsoft 365 federation, Entra ID, Conditional Access, Intune, and PRT.
Hands-on Google Cloud Platform, Terraform, Kubernetes/GKE, Docker, CI/CD, and Python, PowerShell, or Bash.
Experience supporting mission-critical, highly available environments; healthcare/HIPAA experience preferred.
Strong architecture governance, communication, and problem-solving skills.
Certifications
Ping Identity Professional/Architect
Microsoft SC-300 or SC-100
Google Cloud DevOps Engineer or Cloud Security Engineer
CISSP or CIAM
Work arrangement
Yes
Your early-applicant advantage
Live timing from JobBeeper.
11 min
from Linkedin publishing this role to us finding it
20 min
median time from a role going live to a subscriber being told
6 hours
subscribers had this role before this page existed
40,893
roles found in the last 24 hours — the newest are not on this site yet
More openings worth a look
Recently tracked roles with full details and direct application links.
Resource Management Partner – Budget, FP&A & Marketing Operations
Senior IT Project Manager - Healthcare Technology
IT Project Manager - Apptio Targetprocess (ATP)
Resource Management Partner – Budget, FP&A & Marketing Operations
Senior Quadient Inspire Engineer
Resource Management Partner – Budget, FP&A and Process Operations (with exp in Allocadia / Uptempo platform)
Good roles move before most people even see them.
Tell JobBeeper what you want and get fresh matches delivered in minutes.
Create free account →