SSO Solutions Engineer

Senior Systems Engineer - Identity & Access Management (Ping / IAM / SSO) W2 Only - Charlotte or Denver - Onsite

We are seeking a highly skilled Senior Systems Engineer with deep expertise in Identity & Access Management (IAM) to support the design, development, and implementation of enterprise authentication and authorization solutions. This role focuses on building secure, scalable systems-leveraging technologies such as Ping Federate, Ping Access, PingIDM, SSO protocols, and cloud IAM services across AWS, Azure, and Google Cloud Platform.
You will operate as a seasoned technical resource, contributing to complex engineering initiatives, shaping design standards, influencing cross-functional teams, and driving continuous improvement across our identity ecosystem. While this role has no direct reports, you will provide technical leadership, guidance, and strategic input.

Key Responsibilities

Systems Engineering & Architecture

• Participate in requirements gathering, story refinement, and overall solution design.
• Contribute to the development, deployment, and support of OS, systems programming, and data center technologies.
• Define input/output processes, hardware compatibility requirements, and integrate subsystem designs.
• Work across development, security, and infrastructure teams to deliver robust IAM and systems solutions.

Identity & Access Management

• Implement and manage enterprise SSO and federation solutions (SAML, OAuth, OpenID Connect, FIDO, SCIM, LDAP).
• Design and customize Ping policies and authentication flows.
• Federate cloud applications (AWS, Azure, Google Cloud Platform) using Ping Federate.
• Support identity synchronization and lifecycle management using PingIDM/SCIM.
• Maintain IAM standards, identify gaps, and support remediation efforts.

Automation, Deployment & Operations

• Build and improve deployment pipelines that accelerate secure, data-driven decision-making.
• Develop processes that support system transformation, quality controls, workload management, and operational reliability.
• Work with large datasets to meet functional and non-functional requirements.
• Execute integration, regression, and performance testing; analyze results and triage issues.
• Document system behavior, deployment processes, and support requirements.

Required Qualifications

• 7+ years of experience in Information Security, IAM, or Systems Engineering.
• Strong hands-on experience with modern SSO and identity technologies
• (OAuth, OpenID Connect, SAML, FIDO, SCIM, LDAP).
• Expertise with Ping Federate, Ping Access, PingIDM, and other Ping Identity tools.
• Strong experience designing Ping policies and custom integrations.
• Cloud IAM expertise across AWS, Azure, and Google Cloud Platform.
• Experience federating cloud applications using Ping solutions.
• Proficient in Java/J2EE, JavaScript, and scripting languages (Shell, Python, Power Shell, Perl).
• Strong understanding of REST APIs, modern application interaction patterns, and API security.
• Comfort working in Linux, Windows, Tomcat, Web Logic, or Web Sphere environments.
• Knowledge of Active Directory, MFA, risk-based authentication, and privileged access models.
• Experience leading large-scale, enterprise identity projects.
• Excellent communication skills and the ability to collaborate across teams and technical levels.

Preferred Experience

• Holistic understanding of IAM's role in the broader security ecosystem
• (Authentication & Authorization, Endpoint Security, Network Security, Policy Engines).
• Background in web development technologies (HTML, XML, XSL/XSLT, XPATH).
• Experience with global-scale deployments and implementations.

Tools & Technologies

Ping Ping Federate Ping Access PingIDM IAM SSO AWS

Experience Level

Expert / Senior Level
We reserve the right to pay above or below the posted wage based on factors unrelated to sex, race, or any other protected classification.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. This temporary role may be eligible for the following:

• Medical, Dental & Vision
• 401(k)/Roth
• Basic/Supplemental Life & AD&D
• Short and long-term disability
• HSA & DCFSA
• Transportation benefits
• Employee Assistance Program
• Company Paid Time off or State Sick Leave

Job Type & Location
This is a Contract position based out of Denver, CO.
Pay and Benefits
The pay range for this position is $60.00 - $78.00/hr.
Eligibility requirements apply to some benefits and may depend on your job classification and length of employment. Benefits are subject to change and may be subject to specific elections, plan, or program terms. If eligible, the benefits available for this temporary role may include the following:
Medical, dental & vision Critical Illness, Accident, and Hospital 401(k) Retirement Plan - Pre-tax and Roth post-tax contributions available Life Insurance (Voluntary Life & AD&D for the employee and dependents) Short and long-term disability Health Spending Account (HSA)…