Lead design, development, and implementation of Single Sign-On services for our workforce and products.
Assess, triage, and lead resolution or prevention of degraded SSO services.
Develop scripts and automated functions that provision SSO integrations.
Evaluate business impact and risk exposure based on the level of access granted and make improvement recommendations.
Make service recommendations and develop improvements in automated efficiency.
Integrate applications into SSO using various methods such as SAML, OIDC, and SCIM.
Educate and enable operations to triage and identify root cause when degradations occur.
Stay educated and aware of emerging threats and new capabilities or changes that might positively or negatively disrupt the business.

5+ years of expertise building Single Sign-On solutions, preferably with cloud-based IDaaS such as Okta, Auth0, Ping, or Azure/Entra.
Deep understanding of SAML, OIDC, and OAuth 2.0 protocols.
Experience connecting other Identity Providers and Active Directory, setting up routing rules, authentication policies, and other advanced configurations.
Expert knowledge in assessing requirements and proposing best practice designs that integrate with complex applications.
Proficient experience with Python, and additionally automation & orchestration like Terraform, Ansible, or equivalent.
Expert knowledge to assess an end-user or application degradation and leading the resolution back to a healthy state.
Experience with public cloud identity access services.
Extensive experience building architectural artifacts intended for different audiences, such as diagrams, SOPs, change requests, pull requests, peer reviews, as-builts, user manuals, and other design documents.
Certifications in Identity technologies is a plus.

Senior Identity Services Engineer