Identity Provider Engineer

About the Role

As an Identity Provider Engineer at Booz Allen, you will play a critical role in identity and access management and zero trust initiatives. You will support large-scale IAM projects for clients, interfacing with stakeholders and engineering teams to analyze critical processes and user roles. Your responsibilities will include analyzing the identity lifecycle, articulating access requirements, and defining enterprise identity records. You will design, deploy, and support systems to verify user privileges and manage credentials for accessing client assets, implementing enterprise-class solutions like single sign-on and privileged access systems.

Key Responsibilities

• Support large-scale IAM projects for clients.
• Interface with stakeholders and engineering teams to understand critical processes and user roles.
• Analyze the identity lifecycle.
• Articulate access requirements.
• Define enterprise identity records.
• Design, deploy, and support systems to verify appropriate user privileges.
• Manage credentials for accessing client assets.
• Implement enterprise-class solutions such as single sign-on and privileged access systems.

Requirements & Tech Stack

• Ping Federate, Okta, or Entra ID
• SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC)
• Experience developing custom SAML, OAuth, and OIDC integrations
• Troubleshooting protocol exchanges
• Languages for identity platform development and automation: Java, JavaScript, Python, PowerShell, or Groovy
• Experience working with RESTful APIs to integrate identity providers with external applications and automate identity lifecycle processes
• Experience integrating and synchronizing with Active Directory (AD) or LDAP
• Knowledge of Zero Trust architectures
• Implementation of password-less authentication or multifactor authentication (MFA) within the IdP environment
• Ability to resolve complex identity and federation issues (e.g., token validation errors, assertion mismatches, connectivity problems)
• HS diploma or GED
• Active TS/SCI clearance; willingness to take a polygraph exam

Qualifications (Nice to Have)

• Ping Identity Suite tools, including development using PingFederate, PingAccess, PingDirectory, or PingOne with custom workflows and scripting
• Experience building or enhancing automated user lifecycle management using System for Cross-domain Identity Management protocols
• Experience integrating identity provider code and configurations into DevOps and CI/CD pipelines for automated build and deployment workflows
• Knowledge of advanced Okta development features such as Okta Workflows, Custom Authorization Servers, Inline Hooks, and Okta APIs
• Knowledge of compliance and regulatory standards such as NIST, FedRAMP, HIPAA, or other relevant frameworks
• Knowledge of cloud identity platforms such as AWS Cognito, Azure AD B2C, or Google Cloud Identity
• Excellent verbal and written communication skills
• TS/SCI clearance with a polygraph
• Bachelor's degree in Computer Science, Cybersecurity, or Information Technology

Clearance

• Applicants selected will be subject to a security investigation and may need to meet eligibility requirements for access to classified information.
• TS/SCI clearance is required.

Compensation

• The projected compensation range for this position is $86,800.00 to $198,000.00 (annualized USD).