Identity Provider Administrator

Booz Allen Hamilton•Reston, VA

About The Position

As an Identity Provider Administrator at Booz Allen, you will support large-scale identity and access management (IAM) projects for clients, with a focus on identity and access management and zero-trust. You will work with stakeholders and engineering teams to understand critical processes, dependencies, and user roles; analyze identity lifecycles; articulate access requirements; and define enterprise identity records. You will use IAM experience to design, deploy, and support systems that verify user privileges and manage credentials for access to clients’ assets. The work may include implementing solutions ranging from single sign-on to privileged access systems. Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information. TS/SCI clearance is required. Candidates are expected to be on camera during interviews and assessments and may be asked to complete identity verification using biometrics and artificial intelligence. Use of AI or other tools to assist with interview responses is prohibited unless explicitly permitted. The projected annualized compensation range is $86,800 to $198,000 USD. Compensation depends on factors including location, education, skills, experience, and organizational and contract requirements. The position posting will close within 90 days from its posting date. Booz Allen describes a people-first culture that prioritizes collaboration. If the position is remote, occasional in-person work at a Booz Allen or customer facility may be required; hybrid and onsite arrangements follow the expectations described in the posting. The posting does not specify which work model applies to this position.

Requirements

Experience with Ping Federate, Okta, or Entra ID.
Experience with SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
Experience developing custom SAML, OAuth, and OIDC integrations and troubleshooting protocol exchanges.
Experience with identity platform development and automation languages such as Java, JavaScript, Python, PowerShell, or Groovy.
Experience working with RESTful APIs to integrate identity providers with external applications and automate identity lifecycle processes.
Experience integrating and synchronizing with Active Directory (AD) or LDAP.
Knowledge of zero-trust architectures and implementation of passwordless authentication or multifactor authentication (MFA) within an identity provider environment.
Ability to resolve complex identity and federation issues, including token validation errors, assertion mismatches, and connectivity problems.
Active TS/SCI clearance and willingness to take a polygraph exam.
High school diploma or GED.

Nice To Haves

Experience with Ping Identity Suite tools, including PingFederate, PingAccess, PingDirectory, or PingOne, using custom workflows and scripting.
Experience building or enhancing automated user lifecycle management using System for Cross-domain Identity Management (SCIM) protocols.
Experience integrating identity provider code and configurations into DevOps and CI/CD pipelines for automated build and deployment workflows.
Knowledge of advanced Okta development features such as Okta Workflows, Custom Authorization Servers, Inline Hooks, and Okta APIs.
Knowledge of compliance and regulatory standards such as NIST, FedRAMP, HIPAA, or other frameworks relevant to identity management solutions.
Knowledge of cloud identity platforms such as AWS Cognito, Azure AD B2C, or Google Cloud Identity.
Excellent verbal and written communication skills.
TS/SCI clearance with a polygraph.
Bachelor's degree in Computer Science, Cybersecurity, or Information Technology.

Responsibilities

Support large-scale IAM projects for clients.
Work with stakeholders and engineering teams to understand critical processes, dependencies, and user roles.
Analyze identity lifecycles, articulate access requirements, and define enterprise identity records.
Design, deploy, and support systems that verify appropriate user privileges and manage credentials.
Implement enterprise identity solutions, including single sign-on and privileged access systems.