PING Engineer

Booz Allen Hamilton • Riverdale Park, MD

76d • $86,800 - $198,000

About The Position

As an Identity and Access Management (IAM) specialist, you have the skills and experience to keep hackers from taking data and breaking processes. We're looking for someone like you to help our clients meet their missions without disruption. As an IAM engineer at Booz Allen, you'll play a critical role in the world of IAM and zero trust. In this role, you'll support large-scale IAM projects for our clients. You'll interface with stakeholders and engineering teams to delve into the details and dependencies of critical processes and users' roles within them. You'll analyze the identity lifecycle, articulating access requirements and defining enterprise identity records. You'll use your experience in IAM to design, deploy, and support systems that verify appropriate user privileges and manage credentials for accessing our clients' most valuable assets. From single sign-on to privileged access systems, you'll have the chance to implement enterprise-class solutions and stop adversaries in their tracks.

Requirements

• Experience with Ping Federate, Okta, Entra ID, or ADFS.
• Experience with SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience with Identity federation and Single Sign-On (SSO).
• Experience with access control models such as Role-Based Access Control (RBAC) and Attribute-Based Access Control (ABAC).
• Experience integrating IdPs with directory services such as Active Directory (AD) and LDAP.
• Knowledge of Zero Trust architectures and implementation of password-less authentication or multifactor authentication (MFA).
• Ability to resolve complex identity and federation issues.
• Ability to design and operate IdP solutions across on-premises, hybrid, and cloud infrastructures.
• Active TS/SCI clearance; willingness to take a polygraph exam.
• HS diploma or GED.

Nice To Haves

• Experience implementing SCIM protocols for automated user provisioning.
• Experience with advanced platform features such as Okta Workflows and adaptive authentication.
• Experience with scripting languages such as Python, PowerShell, or Bash.
• Knowledge of cloud-native IAM services, including Azure Active Directory, AWS IAM, or Google Cloud Identity.
• TS/SCI clearance with a polygraph.

Responsibilities

• Support large-scale IAM projects for clients.
• Interface with stakeholders and engineering teams.
• Analyze the identity lifecycle and articulate access requirements.
• Define enterprise identity records.
• Design, deploy, and support systems for user privileges and credential management.
• Implement enterprise-class solutions for identity verification.

Benefits

• Health, life, and disability insurance.
• Financial and retirement benefits.
• Paid leave and professional development.
• Tuition assistance and work-life programs.
• Dependent care support.
• Recognition awards program for exceptional performance.

What This Job Offers

• Job Type: Full-time
• Industry: Professional, Scientific, and Technical Services
• Education Level: High school or GED