Lead Consultant, PingFederate

Responsibilities

• Exposure Management, and risk programs, helping organizations stop active threats fast with

Managed Detection & Response (MDR)

• Act as the Team Lead and Federation SME, providing technical guidance to engineers and serving as the primary point of contact.
• Provide expertise on OAuth 2.0, OIDC, SAML, SSO, MFA and standard federation patterns.
• New OIDC/SAML application onboarding
• Federation configuration changes
• Token/configuration updates
• MFA enablement

Application decommissioning

• Validate and refine technical integration requirements with application and Line of Business teams.
• Configure and deploy federation integrations and changes across environments.
• Coordinate pre-validation, deployment and post-deployment validation with application teams.
• Collect validation results and maintain supporting evidence for change and audit requirements.
• Manage the federation intake queue, deployment schedules and change documentation.
• Troubleshoot complex federation/authentication issues and act as the first technical escalation point.
• Maintain runbooks, design documents, configuration standards and operational procedures.
• Work closely with Security Engineering, Architecture, Operations, Change Management and application teams.

Requirements

• Hands-on experience with PingFederate / Ping Identity federation solutions.

Role Summary

Lead Consultant will act as the technical lead and Subject Matter Expert (SME) for federation services, supporting the enterprise IAM application onboarding and change process. The role requires strong hands-on expertise in PingFederate, OAuth 2.0, OpenID Connect (OIDC), SAML, SSO and MFA. The engineer will coordinate the team, serve as the primary technical point of contact, support application teams through federation onboarding and changes, and act as the first point of escalation for complex integration and production issues.

Review and triage requests for

Support IAM security controls, compliance requirements and audit activities.

Requirements

Strong experience in Identity & Access Management (IAM) and federation technologies.

Strong knowledge of

• OAuth 2.0
• OpenID Connect (OIDC)
• SAML 2.0
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)

Federation and authentication patterns

• Experience troubleshooting authentication, authorization and federation integrations.
• Understanding of Active Directory, LDAP and directory integrations.
• Good understanding of authentication and authorization for REST APIs, microservices and web applications.
• Experience integrating IAM solutions with cloud/SaaS platforms, including Azure, AWS or GCP.
• Working knowledge of Linux/Unix and Windows environments.
• Scripting/automation experience using technologies such as Python, Bash, JavaScript or Java.

WHY CYDERES?

Benefits that go beyond the basics, we support our people so they can do their best work.

✔ Medical Insurance - Employee + dependents covered

✔ Life Insurance - Protection for what matters most

✔ Retirement Match Program - We invest in your future

✔ Hybrid Work Model - 2–3 days in office

✔ Maternity & Paternity Leave - Time for the moments that matter

✔ Paid Time Off - PTO + sick & casual leave

✔ Bereavement & Volunteer Time - Give back to your community

✔ Professional Development - Reimbursement program

✔ LinkedIn L&D Platform - Thousands of courses at your fingertips

✔ Mobile Phone Reimbursement - Stay connected, on us

Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.

Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.