IT Security Specialist UTA-JB-00007

KēSTA I.T.•Salt Lake, UT

3d•Remote

About The Position

KēSTA I.T. is seeking an experienced IT Security Specialist for an immediate contract engagement with a government client. This role focuses on leading the migration of enterprise authentication services from legacy Identity and Access Management (IAM) platforms to modern cloud-based identity solutions, specifically PingOne Advanced Identity Cloud and Microsoft Entra ID. The specialist will minimize business disruption while ensuring secure and efficient authentication processes. The ideal candidate possesses deep expertise in IAM, enterprise authentication, modern cloud identity solutions, authentication protocols (OAuth 2.0, OIDC, SAML), and enterprise security best practices. Strong technical, communication, and collaboration skills are essential for success in this role.

Requirements

5+ years of experience implementing and migrating Identity and Access Management (IAM) solutions.
Hands-on experience with PingOne Advanced Identity Cloud.
Hands-on experience with Microsoft Entra ID.
Experience migrating legacy authentication platforms, including ForgeRock/OpenAM.
Strong experience implementing Single Sign-On (SSO) solutions.
Expertise with OAuth 2.0, OpenID Connect (OIDC), and SAML authentication protocols.
Strong understanding of authentication architecture and identity management security best practices.
Experience performing enterprise IAM migration planning, execution, testing, and validation.
Excellent troubleshooting, analytical, and problem-solving skills.
Strong written and verbal communication skills.
Experience creating technical documentation and delivering knowledge transfer to technical teams.
Proven ability to manage stakeholders and collaborate across technical and business teams.

Nice To Haves

Experience supporting government or public sector environments.
Experience leading enterprise Identity and Access Management modernization initiatives.
Experience working within hybrid identity environments.
Relevant cybersecurity or Identity and Access Management certifications.
Proven success leading enterprise authentication migration projects from planning through production support.

Responsibilities

Lead the assessment of existing authentication systems, identity infrastructure, and application integrations.
Develop comprehensive migration roadmaps, implementation strategies, project timelines, and deployment plans for IAM modernization initiatives.
Configure, implement, and administer PingOne Advanced Identity Cloud and Microsoft Entra ID environments.
Design, implement, and validate Single Sign-On (SSO) solutions utilizing OAuth 2.0, OpenID Connect (OIDC), and SAML authentication protocols.
Migrate legacy authentication platforms, including ForgeRock/OpenAM, to modern cloud-based identity management solutions.
Perform system testing, troubleshooting, validation, and issue resolution throughout all phases of migration.
Develop technical documentation, implementation guides, configuration documentation, and operational procedures.
Deliver knowledge transfer sessions and technical guidance to internal teams to ensure long-term operational success.
Provide post-migration support, system stabilization, and ongoing optimization of identity management environments.
Collaborate with technical teams, business stakeholders, and leadership to ensure successful project delivery with minimal operational disruption.
Apply identity and access management security best practices to maintain secure authentication environments.
Identify migration risks, recommend mitigation strategies, and ensure successful completion of enterprise IAM modernization initiatives.