Senior Identity Services Engineer

Switch4 LLC
US - New York - New York
May 14, 2025

Title: Senior Identity Services Engineer
Location: New York City, NY
Job Type: FTE/Permanent

Position Summary:
Responsible for operating and maintaining the portfolio of access management and federation products. Duties include application integration, implementation of access control systems, data analytics, report generation, incident investigation/remediation, server administration, and team mentorship. This role performs both operational and strategic duties with the capability to serve in an architectural capacity, providing essential information and planning for new technology and policy deployments.

Key Responsibilities:
Design, implement, and support enterprise SSO solutions (e.g., PingFederate, Azure AD, Okta).
Maintain and enhance access management platforms and federation infrastructure.
Lead application integrations into existing SSO frameworks using SAML, OAuth2, and OIDC.
Implement and support Role-Based Access Control (RBAC) and modern authentication methods.
Support and improve authentication strategies across the organization.
Collaborate with security, application owners, and infrastructure teams to deliver secure identity solutions.
Troubleshoot complex authentication and federation issues across multiple environments.
Participate in IAM roadmap planning and contribute to architectural decisions.
Provide mentorship and technical guidance to IAM engineers.
Support governance efforts related to authentication, authorization, and access control standards.
Required Qualifications: 5+ years of Identity & Access Management experience with a strong focus on SSO and federation.
Deep technical knowledge of: PingFederate, Azure AD, Okta, ADFS
Federation protocols including SAML, OIDC, and OAuth2
LDAP, Active Directory, SCIM
Proficiency in scripting and development with PowerShell, Python, and Java
Experience working with REST APIs for IAM services; familiarity with Postman or similar tools
Familiarity with OGNL expression language for customizing PingFederate policies
Front-end UX design and customization using HTML, CSS, and JavaScript
Basic Linux administration skills for maintaining and managing IAM infrastructure
Working knowledge of certificates and PKI (X.509, certificate chains, signing, encryption, keystore management)
Strong troubleshooting and debugging skills across application, identity, and network layers
Understanding of modern identity concepts such as Zero Trust, adaptive authentication (risk-based, device/user signals), and conditional access.

Preferred Qualifications: Hands-on experience with the Ping Identity platform, particularly: PingFederate, PingOne, PingID, PingDirectory

Experience with MFA and Passwordless/FIDO2/WebAuthn authentication strategies.
Experience building and configuring enterprise SSO applications in Azure AD / Entra ID.
Exposure to IAM orchestration platforms such as PingOne DaVinci or similar tools.
Experience supporting cloud identity integrations (Azure, AWS, GCP).
Familiarity with enterprise SSO in hybrid environments (on-prem and cloud-based apps).
Strong documentation and communication skills.
Comfortable collaborating across technical and non-technical teams.
Ability to lead projects and mentor junior engineers.

Read the full job description and apply online on the recuiter's web-site

Related Job Postings

Columbia Memorial Health - Clinical Informatics Nurse

Albany Medical Center

US - NY - NY - Rensselaer
May 19, 2025

Rensselaer, NY, United States • Department/Unit: AMHS - Clinical Informatics Information Systems & Services Work Shift: Day (United States of America) Salary Range: $86,650. 99 - $134,309. 04The Clinical Informatics Nurse utilizes the Tenets of American Nurses Association (ANA) Scope and Standards...

Find Jobs Hiring Now Near You!

Get Jobilize Job Search Mobile App Now