Identity Provider Administrator

Booz Allen Hamilton•McLean, VA

2d•$86,800 - $198,000

About The Position

As an Identity Provider Administrator at Booz Allen, you will support large-scale identity and access management (IAM) projects for clients, working with stakeholders and engineering teams to understand critical processes, dependencies, and user roles. You will analyze identity lifecycles, articulate access requirements, and define enterprise identity records. You will design, deploy, and support systems that verify user privileges and manage credentials, including single sign-on and privileged access systems, to help secure client assets and support zero-trust objectives.

Requirements

Experience with Ping Federate, Okta, or Entra ID.
Experience with SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
Experience developing custom SAML, OAuth, and OIDC integrations and troubleshooting protocol exchanges.
Experience with identity platform development and automation languages such as Java, JavaScript, Python, PowerShell, or Groovy.
Experience using RESTful APIs to integrate identity providers with external applications and automate identity lifecycle processes.
Experience integrating and synchronizing with Active Directory (AD) or LDAP.
Knowledge of Zero Trust architectures and implementation of passwordless authentication or multifactor authentication (MFA) in an IdP environment.
Ability to resolve complex identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems.
Active TS/SCI clearance and willingness to take a polygraph exam.
High school diploma or GED.

Nice To Haves

Experience with Ping Identity Suite tools, including PingFederate, PingAccess, PingDirectory, or PingOne development with custom workflows and scripting.
Experience building or enhancing automated user lifecycle management using System for Cross-domain Identity Management (SCIM) protocols.
Experience integrating identity provider code and configurations into DevOps and CI/CD pipelines for automated build and deployment workflows.
Knowledge of advanced Okta development features such as Okta Workflows, Custom Authorization Servers, Inline Hooks, and Okta APIs.
Knowledge of compliance and regulatory standards such as NIST, FedRAMP, HIPAA, or other frameworks relevant to identity management solutions.
Knowledge of cloud identity platforms such as AWS Cognito, Azure AD B2C, or Google Cloud Identity.
Excellent verbal and written communication skills.
TS/SCI clearance with a polygraph.
Bachelor's degree in Computer Science, Cybersecurity, or Information Technology.

Responsibilities

Support large-scale IAM projects for clients.
Work with stakeholders and engineering teams to understand critical processes, dependencies, and user roles.
Analyze identity lifecycles, articulate access requirements, and define enterprise identity records.
Design, deploy, and support systems that verify user privileges and manage credentials.
Implement enterprise-class solutions, including single sign-on and privileged access systems.
Integrate identity providers with external applications and automate identity lifecycle processes.
Resolve identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems.