Role Summary
Lead Consultant will act as the technical lead and Subject Matter Expert (SME) for federation services, supporting the enterprise IAM application onboarding and change process. The role requires strong hands-on expertise in PingFederate, OAuth 2.0, OpenID Connect (OIDC), SAML, SSO and MFA. The engineer will coordinate the team, serve as the primary technical point of contact, support application teams through federation onboarding and changes, and act as the first point of escalation for complex integration and production issues.
Responsibilities
- Act as the Team Lead and Federation SME, providing technical guidance to engineers and serving as the primary point of contact.
- Provide expertise on OAuth 2.0, OIDC, SAML, SSO, MFA and standard federation patterns.
- Review and triage requests for:
- New OIDC/SAML application onboarding
- Federation configuration changes
- Token/configuration updates
- MFA enablement
- Application decommissioning
- Validate and refine technical integration requirements with application and Line of Business teams.
- Configure and deploy federation integrations and changes across environments.
- Coordinate pre-validation, deployment and post-deployment validation with application teams.
- Collect validation results and maintain supporting evidence for change and audit requirements.
- Manage the federation intake queue, deployment schedules and change documentation.
- Troubleshoot complex federation/authentication issues and act as the first technical escalation point.
- Maintain runbooks, design documents, configuration standards and operational procedures.
- Work closely with Security Engineering, Architecture, Operations, Change Management and application teams.
- Support IAM security controls, compliance requirements and audit activities.
Requirements
- Strong experience in Identity & Access Management (IAM) and federation technologies.
- Hands-on experience with PingFederate / Ping Identity federation solutions.
- Strong knowledge of:
- OAuth 2.0
- OpenID Connect (OIDC)
- SAML 2.0
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Federation and authentication patterns
- Experience troubleshooting authentication, authorization and federation integrations.
- Understanding of Active Directory, LDAP and directory integrations.
- Good understanding of authentication and authorization for REST APIs, microservices and web applications.
- Experience integrating IAM solutions with cloud/SaaS platforms, including Azure, AWS or GCP.
- Working knowledge of Linux/Unix and Windows environments.
- Scripting/automation experience using technologies such as Python, Bash, JavaScript or Java.
