[Hiring] Senior SSO Architect & Team Lead @Quantix

Role Description

The SSO Architect will be responsible for leading the SSO engineering squad, ensuring operational reliability, and driving modernization efforts in identity and access management.

Key Responsibilities

• Team Leadership & Architecture Governance
  • Lead, mentor, and technically direct the SSO engineering squad in an Agile/Scrum framework.
  • Partner closely with Enterprise Architecture and Security Architects to align SSO roadmaps with enterprise blueprints.
  • Collaborate with adjacent IAM teams evaluating PingAuthorize and modern IDM/IGA solutions.
  • Partner with the Microsoft/M365 team to ensure seamless federation and a cohesive user experience.
• Operational Reliability & Current Environment
  • Maintain 24x7 operational reliability and high availability (99.99%+) for enterprise federation infrastructure.
  • Manage integrations for PingOne Customer (CIAM) and support enterprise workforce authentication.
  • Onboard and support core clinical applications and enterprise SaaS platforms using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
  • Standardize and automate cryptographic certificate management and token signing.
• Modernization & Future Architecture
  • Lead the active migration of workforce authentication to PingOne Workforce Cloud.
  • Champion and enforce DaVita SSO Enterprise Standards.
  • Deprecate legacy authentication methods and eliminate insecure grants.
  • Architect dynamic identity orchestration workflows using PingOne DaVinci.
  • Drive GCP DevOps automation for identity services.
  • Maintain architectural readiness for potential future adoption of cloud identity platforms.
  • Streamline developer onboarding through self-service tools and CI/CD automation.

Qualifications

• 8+ years of dedicated experience in Identity & Access Management (IAM) and enterprise Single Sign-On (SSO) engineering.
• 2+ years of experience leading engineering squads and mentoring developers.
• Proven track record supporting high-availability, mission-critical environments.

Requirements

• Deep expertise in PingFederate, PingID, PingDirectory, PingCentral, and PingOne Workforce Cloud.
• Solid understanding of fine-grained authorization and modern externalized authorization platforms.
• Expert mastery of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), JWT, and SCIM.
• Strong familiarity with Microsoft 365 federation and Microsoft Entra ID concepts.
• Experience designing session policies and MFA rules for various endpoints.
• Strong hands-on DevOps expertise in Google Cloud Platform (GCP).

Preferred Certifications

• Ping Identity Certified Professional / Architect (PingFederate / PingOne)
• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Google Cloud Certified: Professional Cloud DevOps Engineer
• Certified Information Systems Security Professional (CISSP)
• Certified Identity and Access Manager (CIAM)