Identity Provider Operations Engineer

Identity Provider Operations Engineer Identity services are foundational to modern cybersecurity and mission operations. In this role you will support the ongoing operations, maintenance, and troubleshooting of enterprise IAM and federation services to support Zero Trust initiatives and mission‑critical environments. Responsibilities Monitor identity systems to ensure reliability and availability. Diagnose and resolve SSO, federation, and authentication issues. Maintain MFA and password‑less authentication capabilities. Support user lifecycle management processes. Apply patches, configuration updates, and operational automation. Ensure compliance with organizational security policies and standards. Qualifications Experience administering, supporting, and maintaining identity platforms such as PingFederate, Okta, or Entra ID in an enterprise operations environment. Experience supporting and troubleshooting authentication and federation protocols including SAML 2.0, OAuth 2.0, and OpenID Connect. Experience troubleshooting SAML, OAuth, and OIDC integrations, token exchanges, and federation connectivity issues. Experience working with RESTful APIs to support identity platform integrations, operational automation, and user lifecycle management. Experience supporting integrations and synchronization with Active Directory or LDAP environments. Knowledge of Zero Trust architectures and the operational support of multifactor authentication and password‑less authentication. Ability to diagnose and resolve complex identity and federation operational issues in production environments. Active TS/SCI clearance and willingness to take a polygraph exam. High school diploma or GED. Nice to Have Experience supporting and maintaining Ping Identity Suite tools including PingFederate, PingAccess, PingDirectory, or PingOne. Experience supporting automated user lifecycle management processes using SCIM protocols. Experience maintaining IAM platform integrations within DevOps or CI/CD operational environments. Knowledge of Okta operational features such as Okta Workflows, Custom Authorization Servers, Inline Hooks, and Okta APIs. Knowledge of compliance and regulatory standards, including NIST, FedRAMP, HIPAA, or related identity management frameworks. Knowledge of cloud identity platforms such as AWS Cognito, Azure AD B2C, or Google Cloud Identity. Strong verbal and written communication skills. Bachelor’s degree in Computer Science, Cybersecurity, or Information Technology. Clearance Applicants selected will be subject to a security investigation and must meet eligibility requirements for access to classified information; TS/SCI clearance is required. Compensation and Benefits Salary range: $86,800.00 to $198,000.00 (annualized USD). Benefits include health, life, disability, financial, and retirement benefits, paid leave, professional development, tuition assistance, work‑life programs, and dependent care. EEO Statement All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law. #J-18808-Ljbffr Booz Allen Hamilton