Senior SSO Architect & Team Lead (PingFederate / PingOne)

Tranzeal is an industry leading global Business Transformation Service Provider. We offer specific consulting services as well as pre-packaged, industry specific solutions and services to companies around the world. Our Consulting Services are dedicated to helping our Clients maximize their investments in IT and the overall effectiveness and efficiency of the business. Tranzeal has built its center of competency in Enterprise Resource Planning, Business Intelligence, Supply Chain Management, Customer Resource Management and Information Integration solutions, as well as specific Service orientated offerings such as Test, Quality Assurance and Data Management. We have an urgent W2 opening for a IT Systems Administrator SSO IV (Senior SSO Architect & Team Lead) with our client for a contracting role. Title- IT Systems Administrator SSO IV (Senior SSO Architect & Team Lead) Location – Malvern, PA / Fully Remote Contract – 12+ months Required Qualifications & Experience Experience · Total Experience: 8+ years of dedicated experience in Identity & Access Management (IAM) and enterprise Single Sign-On (SSO) engineering. · Technical Leadership: 2+ years of experience leading engineering squads, mentoring developers, and partnering with Enterprise Architecture and Security Architecture groups. · Enterprise Scale: Proven track record supporting high-availability, mission-critical environments (healthcare and HIPAA compliance experience preferred). Technical Competencies · Ping Identity & DaVinci Orchestration: Deep expertise in PingFederate, PingID, PingDirectory, PingCentral, PingOne Workforce Cloud, PingOne Customer (CIAM), and strong hands-on skills in PingOne DaVinci for identity orchestration and flow design. (Note: PingAccess is not used in this environment). · Authorization & Identity Modernization: Solid understanding of fine-grained authorization (ABAC/PBAC) and how modern externalized authorization platforms (e.g., PingAuthorize) integrate with SSO to replace legacy policy engines (OES). · Federation Protocols & Standards: Expert mastery of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), JWT, and SCIM; deep knowledge of modern grant flows (Auth Code + PKCE, Token Exchange) and legacy grant remediation. · Microsoft Federation & Cloud Identity: Strong familiarity with Microsoft 365 federation, Hybrid Identity, and Microsoft Entra ID (Azure AD) concepts (Conditional Access, Intune, PRT) to optimize user login flows and assess future cloud IdP opportunities. · Endpoints & Session Controls: Experience designing session policies, Single Logout (SLO), and MFA rules for corporate laptops, shared clinical workstations, and Citrix VDI. · GCP & Cloud DevOps: Strong hands-on DevOps expertise in Google Cloud Platform (GCP), including Infrastructure as Code (Terraform), Kubernetes (GKE), Docker, CI/CD pipeline automation (Jenkins/GitLab CI), REST APIs, and scripting (Python, PowerShell, Bash). Core Soft Skills · Strategic Problem Solver: Balances rigorous security controls with frictionless clinical and teammate user workflows. · Collaborative Communicator: Effectively translates enterprise architectural blueprints into technical implementations and communicates clearly across all levels. · Team Coach: Dedicated to developing engineering talent and fostering a culture of technical excellence. Preferred Certifications · Ping Identity Certified Professional / Architect (PingFederate / PingOne) · Microsoft Certified: Identity and Access Administrator Associate (SC-300) / Cybersecurity Architect Expert (SC-100) · Google Cloud Certified: Professional Cloud DevOps Engineer / Cloud Security Engineer · Certified Information Systems Security Professional (CISSP) · Certified Identity and Access Manager (CIAM) Interested candidates can share their resumes to