Intermedia Group
HYBRID - Senior Identity Services Engineer / PingFederate, Azure AD, Okta
Intermedia Group, New York, New York, us, 10261
OPEN JOB: Senior Identity Services Engineer / PingFederate, Azure AD, Okta
LOCATION: New York City, New York
**The role is primarily remote, but will require occasional on-site presence; therefore, candidate should live within a commutable distance to Manhattan
SALARY: $97,000 to $145,000
Full-time
Full Benefits
Essential Job Duties
Design, implement, and support enterprise SSO solutions (e.g., PingFederate, Azure AD, Okta) Maintain and enhance access management platforms and federation infrastructure Lead application integrations into existing SSO frameworks using SAML, OAuth2, and OIDC Implement and support Role-Based Access Control (RBAC) and modern authentication methods Support and improve authentication strategies across the organization Collaborate with information security, app owners, and infrastructure teams to deliver secure identity solutions Troubleshoot complex authentication and federation issues across multiple environments Participate in IAM roadmap planning and contribute to architectural decisions Provide mentorship and technical guidance to IAM engineers Support governance efforts related to authentication, authorization, and access control standards
Required Qualifications
5+ years of Identity & Access Management experience with a strong focus on SSO and federation Deep technical knowledge of:
PingFederate, Azure AD, Okta, ADFS Federation protocols including SAML, OIDC, and OAuth2 LDAP, Active Directory, SCIM
Proficiency in scripting and development with PowerShell, Python, and Java Experience working with REST APIs for IAM services; familiarity with Postman or similar tools Familiarity with OGNL expression language for customizing PingFederate policies Front-end UX design and customization using HTML, CSS, and JavaScript Basic Linux administration skills for maintaining and managing IAM infrastructure Working knowledge of certificates and PKI (X.509, certificate chains, signing, encryption, keystore management) Strong troubleshooting and debugging skills across application, identity, and network layersx Understanding of modern identity concepts such as Zero Trust, adaptive authentication (risk-based, device/user signals), and conditional access
Preferred Qualifications
Hands-on experience with the Ping Identity platform, particularly:
PingFederate, PingOne, PingID, PingDirectory
Experience with MFA and Passwordless/FIDO2/WebAuthn authentication strategies Experience building and configuring enterprise SSO applications in Azure AD / Entra ID Exposure to IAM orchestration platforms such as PingOne DaVinci or similar tools Experience supporting cloud identity integrations (Azure, AWS, GCP) Familiarity with enterprise SSO in hybrid environments (on-prem and cloud-based apps) Strong documentation and communication skills Comfortable collaborating across technical and non-technical teams Ability to lead projects and mentor junior engineers
If you are interested in pursuing this opportunity, please respond back and include the following:
Full MS WORD Resume Required compensation Contact information Availability Upon receipt, one of our managers will contact you to discuss in full
JASON DENMARK Recruiting Manager INTERMEDIA GROUP, INC. EMAIL:
jdenmark@intermediagroup.com LINKEDIN:
https://www.linkedin.com/in/jasondenmark
Essential Job Duties
Design, implement, and support enterprise SSO solutions (e.g., PingFederate, Azure AD, Okta) Maintain and enhance access management platforms and federation infrastructure Lead application integrations into existing SSO frameworks using SAML, OAuth2, and OIDC Implement and support Role-Based Access Control (RBAC) and modern authentication methods Support and improve authentication strategies across the organization Collaborate with information security, app owners, and infrastructure teams to deliver secure identity solutions Troubleshoot complex authentication and federation issues across multiple environments Participate in IAM roadmap planning and contribute to architectural decisions Provide mentorship and technical guidance to IAM engineers Support governance efforts related to authentication, authorization, and access control standards
Required Qualifications
5+ years of Identity & Access Management experience with a strong focus on SSO and federation Deep technical knowledge of:
PingFederate, Azure AD, Okta, ADFS Federation protocols including SAML, OIDC, and OAuth2 LDAP, Active Directory, SCIM
Proficiency in scripting and development with PowerShell, Python, and Java Experience working with REST APIs for IAM services; familiarity with Postman or similar tools Familiarity with OGNL expression language for customizing PingFederate policies Front-end UX design and customization using HTML, CSS, and JavaScript Basic Linux administration skills for maintaining and managing IAM infrastructure Working knowledge of certificates and PKI (X.509, certificate chains, signing, encryption, keystore management) Strong troubleshooting and debugging skills across application, identity, and network layersx Understanding of modern identity concepts such as Zero Trust, adaptive authentication (risk-based, device/user signals), and conditional access
Preferred Qualifications
Hands-on experience with the Ping Identity platform, particularly:
PingFederate, PingOne, PingID, PingDirectory
Experience with MFA and Passwordless/FIDO2/WebAuthn authentication strategies Experience building and configuring enterprise SSO applications in Azure AD / Entra ID Exposure to IAM orchestration platforms such as PingOne DaVinci or similar tools Experience supporting cloud identity integrations (Azure, AWS, GCP) Familiarity with enterprise SSO in hybrid environments (on-prem and cloud-based apps) Strong documentation and communication skills Comfortable collaborating across technical and non-technical teams Ability to lead projects and mentor junior engineers
If you are interested in pursuing this opportunity, please respond back and include the following:
Full MS WORD Resume Required compensation Contact information Availability Upon receipt, one of our managers will contact you to discuss in full
JASON DENMARK Recruiting Manager INTERMEDIA GROUP, INC. EMAIL:
jdenmark@intermediagroup.com LINKEDIN:
https://www.linkedin.com/in/jasondenmark