Lead Consultant, PingFederate

We Help the World Be Everyday Ready™ Today's threatscape is relentless. So are we. At Cyderes, we build practical Identity & Access Management (IAM), Exposure Management, and risk programs, helping organizations stop active threats fast with Managed Detection & Response (MDR) that integrates with existing tools. Powering it all is Meridian, our entity fabric that connects identities, assets, and access into one trusted reality. Augmented by AI and driven by experienced operators, our tireless global team arms organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way. 🏆 Great Place to Work® Certified™

Role Summary Lead Consultant will act as the technical lead and Subject Matter Expert (SME) for federation services, supporting the enterprise IAM application onboarding and change process. The role requires strong hands-on expertise in PingFederate, OAuth 2.0, OpenID Connect (OIDC), SAML, SSO and MFA. The engineer will coordinate the team, serve as the primary technical point of contact, support application teams through federation onboarding and changes, and act as the first point of escalation for complex integration and production issues.

Responsibilities Act as the Team Lead and Federation SME, providing technical guidance to engineers and serving as the primary point of contact.

Provide expertise on OAuth 2.0, OIDC, SAML, SSO, MFA and standard federation patterns.

Review and triage requests for:

New OIDC/SAML application onboarding

Federation configuration changes

Token/configuration updates

MFA enablement

Application decommissioning

Validate and refine technical integration requirements with application and Line of Business teams.

Configure and deploy federation integrations and changes across environments.

Coordinate pre-validation, deployment and post-deployment validation with application teams.

Collect validation results and maintain supporting evidence for change and audit requirements.

Manage the federation intake queue, deployment schedules and change documentation.

Troubleshoot complex federation/authentication issues and act as the first technical escalation point.

Maintain runbooks, design documents, configuration standards and operational procedures.

Work closely with Security Engineering, Architecture, Operations, Change Management and application teams.

Support IAM security controls, compliance requirements and audit activities.

Requirements Strong experience in Identity & Access Management (IAM) and federation technologies.

Hands-on experience with PingFederate / Ping Identity federation solutions.

Strong knowledge of:

OAuth 2.0

OpenID Connect (OIDC)

SAML 2.0

Single Sign-On (SSO)

Multi-Factor Authentication (MFA)

Federation and authentication patterns

Experience troubleshooting authentication, authorization and federation integrations.

Understanding of Active Directory, LDAP and directory integrations.

Good understanding of authentication and authorization for REST APIs, microservices and web applications.

Experience integrating IAM solutions with cloud/SaaS platforms, including Azure, AWS or GCP.

Working knowledge of Linux/Unix and Windows environments.

Scripting/automation experience using technologies such as Python, Bash, JavaScript or Java.

WHY CYDERES?  Benefits that go beyond the basics, we support our people so they can do their best work. ✔ Medical Insurance - Employee + dependents covered ✔ Life Insurance - Protection for what matters most ✔ Retirement Match Program - We invest in your future ✔ Hybrid Work Model - 2–3 days in office ✔ Maternity & Paternity Leave - Time for the moments that matter ✔ Paid Time Off - PTO + sick & casual leave ✔ Bereavement & Volunteer Time - Give back to your community ✔ Professional Development - Reimbursement program ✔ LinkedIn L&D Platform - Thousands of courses at your fingertips ✔ Mobile Phone Reimbursement - Stay connected, on us

Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.

Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.