Senior IAM Engineer
Stefanini LATAM · Mexico City Metropolitan Area
Tailor my CV for this job — freeSenior SSO Engineer – PingFederateWe are looking for a Senior SSO Engineer with strong hands-on experience in Identity and Access Management (IAM), particularly with PingFederate, to support a large-scale corporate separation project.The ideal candidate will be responsible for implementing, managing, and optimizing SSO infrastructure, ensuring secure identity federation and seamless user access across enterprise applications.Key ResponsibilitiesDesign, implement, configure, and maintain PingFederate environments.Lead SSO infrastructure migration and identity federation activities during corporate separation.Manage SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) integrations.Integrate PingFederate with Active Directory, Azure AD / Entra ID, and LDAP.Configure and manage Identity Providers (IdP), Service Providers (SP), authentication policies, and MFA integrations.Troubleshoot complex authentication, authorization, and federation issues.Support application onboarding, migration, and decommissioning.Develop automation scripts using PowerShell and Python.Ensure compliance with security policies and identity governance standards.Maintain technical documentation, architecture diagrams, and operational procedures.RequirementsBachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.5+ years of experience in Identity and Access Management (IAM).At least 3 years of hands-on experience with SSO technologies.Strong expertise in PingFederate implementation, configuration, and administration.Solid knowledge of SAML 2.0, OAuth 2.0, and OpenID Connect.Experience integrating SSO solutions with Active Directory, Azure AD / Entra ID, and LDAP.Proficiency in PowerShell and/or Python scripting.Strong troubleshooting, analytical, and communication skills.Advanced English proficiency (mandatory).Preferred QualificationsExperience with corporate separation, divestiture, carve-out, or large-scale IAM migration projects.Experience managing enterprise-level identity federation environments.Knowledge of high availability architectures and MFA solutions.If you have strong PingFederate expertise and experience managing enterprise SSO environments, we'd love to hear from you!