Identity Provider Administrator

Booz Allen Hamilton•Reston, VA

1d•$86,800 - $198,000•Onsite

About The Position

As an Identity Provider Administrator at Booz Allen, you will support large-scale identity and access management (IAM) projects for clients, working with stakeholders and engineering teams to understand critical processes, dependencies, and user roles. You will analyze identity lifecycles, articulate access requirements, and define enterprise identity records. You will design, deploy, and support systems that verify user privileges and manage credentials for access to client assets, including single sign-on and privileged access systems. The role focuses on identity and access management and Zero Trust. Applicants must have an active TS/SCI clearance and be willing to take a polygraph exam. The position is listed as not remote, with locations in Reston and McLean, Virginia.

Requirements

Experience with Ping Federate, Okta, or Entra ID.
Experience with SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
Experience developing custom SAML, OAuth, and OIDC integrations and troubleshooting protocol exchanges.
Experience with identity platform development or automation languages such as Java, JavaScript, Python, PowerShell, or Groovy.
Experience working with RESTful APIs to integrate identity providers with external applications and automate identity lifecycle processes.
Experience integrating and synchronizing with Active Directory (AD) or LDAP.
Knowledge of Zero Trust architectures and implementation of password-less authentication or multifactor authentication (MFA) within an IdP environment.
Ability to resolve complex identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems.
Active TS/SCI clearance and willingness to take a polygraph exam; the posting also states that TS/SCI clearance is required.
High school diploma or GED.

Nice To Haves

Experience with Ping Identity Suite tools, including PingFederate, PingAccess, PingDirectory, or PingOne, with custom workflows and scripting.
Experience building or enhancing automated user lifecycle management using System for Cross-domain Identity Management (SCIM) protocols.
Experience integrating identity provider code and configurations into DevOps and CI/CD pipelines for automated build and deployment workflows.
Knowledge of advanced Okta development features such as Okta Workflows, Custom Authorization Servers, Inline Hooks, and Okta APIs.
Knowledge of compliance and regulatory standards such as NIST, FedRAMP, HIPAA, or other frameworks relevant to identity management solutions.
Knowledge of cloud identity platforms such as AWS Cognito, Azure AD B2C, or Google Cloud Identity.
Excellent verbal and written communication skills.
TS/SCI clearance with a polygraph.
Bachelor's degree in Computer Science, Cybersecurity, or Information Technology.

Responsibilities

Support large-scale IAM projects for clients.
Interface with stakeholders and engineering teams to understand processes, dependencies, and user roles.
Analyze identity lifecycles, articulate access requirements, and define enterprise identity records.
Design, deploy, and support systems that verify user privileges and manage credentials.
Implement and support identity solutions, including single sign-on and privileged access systems.
Develop custom SAML, OAuth, and OIDC integrations and troubleshoot protocol exchanges.
Integrate identity providers with external applications and automate identity lifecycle processes using RESTful APIs.
Integrate and synchronize identity systems with Active Directory or LDAP.
Resolve complex identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems.