<h3>Job Description</h3>
Job DescriptionValorem Reply, part of the Reply Network, is a leader in security-focused digital transformation. We advise and support our clients across cloud security, identity, and automation — enabling them to operate securely and efficiently in a complex digital world. As a DevOps Engineer, you will deploy and automate identity orchestration flows using Ping Identity’s DaVinci platform. You will help integrate DaVinci workflows into CI/CD pipelines and collaborate with cloud, infrastructure, and security teams to support scalable and secure orchestration in hybrid environments. Your work will help operationalize identity use cases with automation, resilience, and compliance in mind.Responsibilities
<ul>
<li>Implement and maintain identity orchestration flows using Ping DaVinci.&nbsp; Experience customizing or building Ping DaVinci nodes</li>
<li>Integrate DaVinci workflows into DevOps toolchains and CI/CD pipelines like GitHub Actions, Jenkins, or Azure DevOps</li>
<li>Automate deployment and configuration of DaVinci nodes and identity journeys across environments</li>
<li>Collaborate with infrastructure, cloud, and security teams to ensure reliable orchestration at scale</li>
<li>Monitor and optimize orchestration flows for performance, resilience, and security compliance</li>
<li>Implement version control and promotion strategies for DaVinci flows</li>
<li>Provide support on orchestration tooling within the DevOps lifecycle</li>
</ul>
Minimum Requirements
<ul>
<li>3+ years experience in DevOps, IAM engineering, or API platform architecture</li>
<li>Experience with Ping Identity’s DaVinci platform</li>
<li>Knowledge of identity protocols including SAML, OAuth 2.0, OIDC</li>
<li>Proficiency in RESTful APIs and JSON</li>
<li>Experience managing infrastructure as code using tools like Terraform, Helm, or Ansible</li>
<li>Scripting ability in Bash, PowerShell, Python, or similar</li>
</ul>
Preferred Qualifications
<ul>
<li>Experience with PingOne Suite including PingOne SSO, Protect, Risk, MFA</li>
<li>Strong working knowledge of JavaScript for custom logic and flow extensions</li>
<li>Experience working with XML for federation, policy, and configuration artifacts</li>
<li>Advanced use of JSON for DaVinci payloads, API integrations, and event handling</li>
<li>Basic proficiency with HTML and CSS for custom UI, branding, and hosted page integration</li>
<li>Experience debugging browser-based authentication and identity flows</li>
<li>Familiarity with Kubernetes and Docker</li>
<li>Experience with cloud-native identity architectures in Azure and AWS</li>
<li>Certifications in Ping DaVinci, DevOps Engineering, or major cloud platforms</li>
</ul>
About ReplyReply specializes in the design and implementation of solutions based on new communication channels and digital media. Reply is a network of highly specialized companies supporting global industrial groups operating in the telecom and media, industry and services, banking, insurance and public administration sectors in the definition and development of business models enabled for the new paradigms of AI, cloud computing, digital media and the Internet of Things. Reply services include Consulting, System Integration and Digital Services. Reply is an equal opportunity employer. We are committed to provide equal opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. If you need assistance and reasonable accommodation due to a disability during the application or the recruiting process, email us at <a href="mailto:jobusa@reply.com" target="_blank">jobusa@reply.com</a>. Visit our website at <a href="http://www.reply.com" target="_blank">www.reply.com</a> to learn more about our open roles.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

IAM Ping DaVinci Engineer

<h3>Job Description</h3>
Job Description
Barbaricum is a rapidly growing government contractor providing leading-edge support to federal customers, with a particular focus on Defense and National Security mission sets. We leverage more than 17 years of support to stakeholders across the federal government, with established and growing capabilities across Intelligence, Analytics, Engineering, Mission Support, and Communications disciplines. Founded in 2008, our mission is to transform the way our customers approach constantly changing and complex problem sets by bringing to bear the latest in technology and the highest caliber of talent.
Headquartered in Washington, DC's historic Dupont Circle neighborhood, Barbaricum also has a corporate presence in Tampa, FL, Bedford, IN, and Dayton, OH, with team members across the United States and around the world. As a leader in our space, we partner with firms in the private sector, academic institutions, and industry associations with a goal of continually building our expertise and capabilities for the benefit of our employees and the customers we support. Through all of this, we have built a vibrant corporate culture diverse in expertise and perspectives with a focus on collaboration and innovation. Our teams are at the frontier of the Nation's most complex and rewarding challenges. Join our team.

We are seeking an ICAM Identity Engineer to provide hands-on implementation and operational support for enterprise identity, credential, and access management platforms.
The Role
The ICAM Identity Engineer is a hands-on technical specialist responsible for deploying, configuring, and maintaining identity platforms that enforce least-privilege access and Zero Trust principles. This role focuses on execution within Identity Providers (IdP), Privileged Access Management (PAM), and Identity Governance and Administration (IGA) solutions across cloud and on-prem environments.
Responsibilities
<ul>
<li>Implement and maintain Microsoft Entra ID Conditional Access policies and CAC/PKI authentication</li>
<li>Manage federation and SSO integrations using Ping Federate (SAML, OIDC, MFA)</li>
<li>Onboard and manage privileged accounts within an enterprise PAM solution (e.g., Delinea)</li>
<li>Configure credential rotation, session monitoring, and Just-In-Time / Just-Enough-Administration workflows</li>
<li>Implement SailPoint IGA workflows for Joiner-Mover-Leaver lifecycle automation and access certification</li>
<li>Administer Active Directory using delegated administration tools (e.g., Active Roles)</li>
<li>Manage Linux identity and authorization policies using Red Hat IdM (HBAC, sudo)</li>
<li>Troubleshoot identity, authentication, and access control issues across enterprise environments</li>
</ul>
Required Qualifications
<ul>
<li>Active DoD Top Secret clearance with SCI eligibility</li>
<li>DoD 8140 compliant (IAT Level II or higher)</li>
<li>Hands-on experience with at least one core identity platform:</li>
<li>Microsoft Entra ID</li>
<li>Enterprise PAM (e.g., Delinea)</li>
<li>Enterprise IGA (e.g., SailPoint)</li>
<li>Strong understanding of identity security principles (least privilege, MFA, RBAC/ABAC, JIT/JEA)</li>
<li>Experience administering Active Directory and enterprise identity policies</li>
<li>Ability to implement and troubleshoot complex access control and security configurations</li>
<li>Labor Category Alignment</li>
<li>Journeyman: 3–10 years of experience; BA/BS or MA/MS</li>
<li>Senior: 10+ years of experience; MA/MS; supports mission-critical efforts and may lead others</li>
<li>SME: Recognized ICAM expert providing strategic guidance and leadership on complex identity initiatives</li>
</ul>
Preferred Qualifications
<ul>
<li>Microsoft Certified: Identity and Access Administrator (SC-300)</li>
<li>Delinea Certified Administrator</li>
<li>SailPoint IdentityNow certification</li>
<li>Ping Federate certification</li>
<li>Experience with Red Hat IdM</li>
</ul>

EEO Commitment
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law.

ICAM Identity Engineer

<h3>Job Description</h3>
Job DescriptionDescription:
Athenix Special Missions is seeking an ICAM Identity Engineer in MacDill Air Force Base (Tampa), Florida!
 
ASM Quality Policy: To meet or exceed our customers’ expectations for quality, delivery, and service through continual improvement, striving to meet our objectives, and committing to meeting all legal and statutory requirements 

Primary Location: MacDill Air Force Base, Florida 
Must be a U.S citizen 
Security Clearance: TS/SCI
 
Position Summary
The Identity (Cyber) Engineer is a hands-on technical specialist responsible for the implementation, configuration, and management of the core platforms that secure user and system identities across the enterprise. This role focuses on the "hands-on-keyboard" execution of deploying and maintaining the security policies and controls within the organization's Identity Providers (IdP), Privileged Access Management (PAM), and Identity Governance and Administration (IGA) solutions. The ideal candidate will have deep technical expertise in one or more of these domains and a strong commitment to implementing least-privilege access in a complex hybrid environment.
 
Duties &amp; Responsibilities (Hands-on Implementation)
<ul>
<li>Identity Provider and Authentication Management:
<ul>
<li>Microsoft: Design, build, test, and deploy Microsoft Entra ID Conditional Access policies to enforce Zero Trust principles for access to cloud resources in Azure and AWS. Configure and maintain Certificate-Based Authentication (CBA) for CAC/PKI. Manage and troubleshoot the on-premises ADFS environment for legacy application support.</li>
<li>Ping Federate: Configure and manage the Ping Federate platform as an enterprise federation gateway. Onboard new applications for Single Sign-On (SSO) using SAML and OIDC. Build and maintain authentication policies to enforce strong, phishing-resistant MFA.</li>
</ul>
</li>
<li>Privileged Access Management (PAM):
<ul>
<li>Delinea: Perform the hands-on onboarding of all privileged user, service, and application accounts into the Delinea vault.</li>
<li>Configure and enforce Delinea policies for credential rotation, session recording, and monitoring.</li>
<li>Build and implement Just-in-Time (JIT) and Just-Enough-Administration (JEA) access request and approval workflows to eliminate standing privileges.</li>
</ul>
</li>
<li>Identity Governance and Administration (IGA):
<ul>
<li>SailPoint: Implement and configure the automation of the Joiner-Mover-Leaver (JML) identity lifecycle process, replacing manual, ticket-based systems.</li>
<li>Build and maintain the enterprise access catalog in SailPoint to replace the manual IMT48 form with an automated, workflow-driven request and approval system.</li>
<li>Configure and execute periodic access certification campaigns for critical applications and privileged roles.</li>
</ul>
</li>
<li>AD and Linux Identity Management:
<ul>
<li>One Identity ARS: Use the Active Roles console to implement secure, delegated administration for Active Directory, creating policies to automate user/group lifecycle tasks.</li>
<li>Red Hat IdM: Centrally manage authorization policies for the Linux estate, defining Host-Based Access Control (HBAC) rules and sudo policies to control access to RHEL servers.</li>
</ul>
</li>
</ul>
Requirements:

Qualifications and Technical Skills:
<ul>
<li>Required:
<ul>
<li>Deep, hands-on experience with at least one of the following core platforms: Microsoft Entra ID, an enterprise PAM solution (e.g., Delinea), or an enterprise IGA solution (e.g., SailPoint).</li>
<li>Strong understanding of core identity security principles, including least privilege, MFA, JIT/JEA, and RBAC/ABAC.</li>
<li>Experience with Active Directory administration and group policy management.</li>
<li>Ability to implement and troubleshoot complex security policies within enterprise tools.</li>
<li>DoD 8140 Compliance (IAT Level II)</li>
</ul>
</li>
<li>Preferred:
<ul>
<li>Microsoft Certified: Identity and Access Administrator (SC-300).</li>
<li>Delinea Certified Administrator.</li>
<li>SailPoint Certified IdentityNow Engineer.</li>
<li>Ping Certified Professional.</li>
<li>Experience with Red Hat IdM policy management.</li>
</ul>
</li>
</ul>
Equal Opportunity Employer, including disability and protected veteran status

<h3>Job Description</h3>
Job DescriptionWho we are.Platinum Technologies is a Northern Virginia based integrated solutions firm that specializes in Cybersecurity, Cloud and Digital Services to the Public Sector. Our team solves hard problems and helps our Mission Partners achieve their goals. If you are self-motivated, possess demonstrated learning agility, and are passionate about delivering high-quality work products – we want to hear from you.&nbsp;We lead with technical expertise, but that is just the tip of the iceberg – the ‘Why’ matters. At Platinum, we don’t hire people to do a job. We provide professional and leadership development to complement our self-motivated domain experts. Our teammates are dot-connecting leaders that operate in a mutually accountable environment to deliver thought leadership, expert technical analysis, and quality execution for our clients You.The Identity (Cyber) Engineer is a hands-on technical specialist responsible for the implementation, configuration, and management of the core platforms that secure user and system identities across the enterprise. This role focuses on the "hands-on-keyboard" execution of deploying and maintaining the security policies and controls within the organization's Identity Providers (IdP), Privileged Access Management (PAM), and Identity Governance and Administration (IGA) solutions. The ideal candidate will have deep technical expertise in one or more of these domains and a strong commitment to implementing least-privilege access in a complex hybrid environment.&nbsp;We are offering a competitive sign-on bonus and relocation assistance for qualified candidates. Located at MacDill AFB in Tampa, Florida. Candidates must hold an active TS/SCI clearance. Key Responsibilities (Hands-on Implementation): Identity Provider and Authentication Management:● Microsoft: Design, build, test, and deploy Microsoft Entra ID Conditional Access policies to enforce Zero Trust principles for access to cloud resources in Azure and AWS. Configure and maintain Certificate-Based Authentication (CBA) for CAC/PKI. Manage and troubleshoot the on-premises ADFS environment for legacy application support.● Ping Federate: Configure and manage the Ping Federate platform as an enterprise federation gateway. Onboard new applications for Single Sign-On (SSO) using SAML and OIDC. Build and maintain authentication policies to enforce strong, phishing-resistant MFA. Privileged Access Management (PAM):● Delinea: Perform the hands-on onboarding of all privileged user, service, and application accounts into the Delinea vault.● Configure and enforce Delinea policies for credential rotation, session recording, and monitoring.● Build and implement Just-in-Time (JIT) and Just-Enough-Administration (JEA) access request and approval workflows to eliminate standing privileges. Identity Governance and Administration (IGA):● SailPoint: Implement and configure the automation of the Joiner-Mover-Leaver (JML) identity lifecycle process, replacing manual, ticket-based systems.● Build and maintain the enterprise access catalog in SailPoint to replace the manual IMT48 form with an automated, workflow-driven request and approval system.● Configure and execute periodic access certification campaigns for critical applications and privileged roles. AD and Linux Identity Management:● One Identity ARS: Use the Active Roles console to implement secure, delegated administration for Active Directory, creating policies to automate user/group lifecycle tasks.● Red Hat IdM: Centrally manage authorization policies for the Linux estate, defining Host-Based Access Control (HBAC) rules and sudo policies to control access to RHEL servers. Qualifications and Technical Skills:Required:● Deep, hands-on experience with at least one of the following core platforms: Microsoft Entra ID, an enterprise PAM solution (e.g., Delinea), or an enterprise IGA solution (e.g., SailPoint).● Strong understanding of core identity security principles, including least privilege, MFA, JIT/JEA, and RBAC/ABAC.● Experience with Active Directory administration and group policy management.● Ability to implement and troubleshoot complex security policies within enterprise tools.● DoD 8140 Compliance (IAT Level II) Journeyman● Education: BA/BS or MA/MS● Years Exp: 3-10● A Journeyman labor category has 3 to 10 years of experience and a BA/BS or MA/MS degree. A Journeyman labor category typically performs all functional duties independently. Senior● Education: MA/MS● Years: 10+● A Senior labor category has over 10 years of experience and a MA/MS degree. A Senior labor category typically works on high-visibility or mission critical aspects of a given program and performs all functional duties independently. A Senior labor category may oversee the efforts of less senior staff and/or be responsible for the efforts of all staff assigned to a specific job. SME● A Subject Matter Expert is an individual whose qualifications and/or particular expertise are exceptional and/or highly unique. Subject Matter Experts do not have specific experience/education qualifications, but are typically identified as recognized Industry leaders for a given area of expertise. Subject Matter Experts typically perform the following kinds of functions: Initiates, supervises, and/or develops requirements from a project’s inception to conclusion for complex to extremely complex programs; Provides strategic advice, technical guidance and expertise to program and project staff; Provides detailed analysis, evaluation and recommendations for improvements, optimization development, and/or maintenance efforts for client-specific or mission critical challenges/issues; Consults with client to define need or problem supervises studies and leads surveys to collect and analyze data to provide advice and recommend solutions. Preferred:● Microsoft Certified: Identity and Access Administrator (SC-300).● Delinea Certified Administrator.● SailPoint Certified IdentityNow Engineer.● Ping Certified Professional.● Experience with Red Hat IdM policy management. The Company is an Equal Opportunity/Affirmative Action employer. All qualified candidates will receive consideration for employment without regard to disability, protected veteran status, race, color, religious creed, national origin, citizenship, marital status, sex, sexual orientation/gender identity, age, or genetic information.
We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

<h3>Job Description</h3>
Job Description
Job Description:
&nbsp;
We are looking for IAM PingFederate Engineer with strong IAM skills and expertise in App Security oAuth2 and OIDC, Ping Federate and Ping Access and SiteMinder.
&nbsp;
Responsibilities:
&nbsp;
<ul>
<li>Should be responsible to delivering suite of products for onboarding application security into modern Ping solution.</li>
<li>Performs shared capabilities development and support</li>
<li>Codes solutions and unit tests to deliver a requirement/story per the defined acceptance criteria and compliance requirements.</li>
<li>Ensures solutions are well designed with maintainability/ease of integration and testing built-in from the outset</li>
<li>Must be pro-active, enthusiastic, adaptable and results driven</li>
</ul>
&nbsp;
Requirements:
<ul>
<li>Excellent written and oral communication skills</li>
<li>Must have strong IAM skills, App Security oAuth2 and OIDC, Ping Federate and Ping Access and SiteMinder</li>
<li>Experience in handling large scale multi-tiered application</li>
<li>Understanding on middleware technologies</li>
<li>Excellent analytical skills and critical thinking</li>
<li>Experience in project delivery in an agile environment</li>
<li>Experience in a CI/CD environment with automated</li>
<li>REST API design and development</li>
<li>Site Minder, PING Identity</li>
<li>Experience in collaborating with various stakeholders on delivering the solutions&nbsp;</li>
<li>Familiar to frontend web UI development: JavaScript, AngularJS</li>
<li>Experience in Application Security</li>
<li>Very good presentation skills</li>
</ul>

IAM Ping Federate Engineer

<h3>Job Description</h3>
Job Description We are seeking an accomplished Sr. Ping Engineer to lead the delivery of client engagements with a focus on providing exceptional value through mastery of Ping Identity technologies. This role requires an individual who operates independently without direct supervision, leads teams of engineers in their operations and career development, and serves as the most senior technical resource on projects. Responsibilities 
<ul>
<li>Maintain master's-level understanding of Ping Identity technologies (PingFederate, PingAccess, PingDirectory, PingOne)</li>
<li>Lead a team of engineers in developing workflows to tackle complex issues and solve problems efficiently</li>
<li>Execute all tasks outlined in the scope of work and follow standard operating procedures with no direct oversight</li>
<li>Lead technical discussions with clients to analyze needs, understand engineering requirements, and ensure satisfaction</li>
<li>Serve as the escalation point for complex issues and mentor Associate, Level I, and Level II Engineers</li>
<li>Monitor and approve timecards, perform performance reviews, and provide career development guidance for team members</li>
<li>Identify and communicate cross-sell and up-sell opportunities across services</li>
<li>Contribute to thought leadership, oversee the creation of Standard Operating Procedures, and provide input on service portfolio expansion </li>
</ul>
 Qualifications 
<ul>
<li>Currently holds a TS/SCI with a Full Scope polygraph</li>
<li>Bachelor's degree in a related field or at least 8 years of related work experience</li>
<li>Ping Identity Certified Professional/Expert for PingFederate, PingAccess, PingDirectory, PingOne</li>
<li>Experience operating in classified environments</li>
<li>Strong understanding of governance, compliance, and leadership concepts</li>
<li>Experience leading engineering teams, handling tasking, resolving personnel issues, and providing actionable feedback</li>
<li>Excellent communication skills to convey complex technical concepts to varied audiences</li>
<li>Strong problem-solving abilities with keen attention to detailWillingness to travel to meet client needs </li>
</ul>
 Compensation &amp; Benefits We offer a benefits package designed to support work/life balance and continued professional growth: 
<ul>
<li>Work/life balanceProfessional training resources</li>
<li>Opportunities to solve unique, complex projects through creative problem-solving</li>
<li>Volunteer opportunities through an employee community program</li>
<li>Ability and technology to work remotely/from home, where applicable </li>
</ul>
 Location: Herndon, VA 
<ul>
<li>Schedule: Senior leadership role with time allocated as: 80% engagement delivery, 10% team management, 5% corporate strategy, 5% training</li>
<li>Perks: Lead technical projects in classified environments with Ping Identity technologies and mentor engineering teams</li>
<li>Travel: Required to meet client needs </li>
</ul>
 Salary $206,000 per year.

Sr. Ping Engineer - TS/SCI with FS Poly

<h3>Job Description</h3>
Job Description We are seeking an accomplished Sr. Ping Engineer to lead the delivery of client engagements with a focus on providing exceptional value through mastery of Ping Identity technologies. This role requires an individual who operates independently without direct supervision, leads teams of engineers in their operations and career development, and serves as the most senior technical resource on projects. Responsibilities 
<ul>
<li>Maintain master's-level understanding of Ping Identity technologies (PingFederate, PingAccess, PingDirectory, PingOne)</li>
<li>Lead a team of engineers in developing workflows to tackle complex issues and solve problems efficiently</li>
<li>Execute all tasks outlined in the scope of work and follow standard operating procedures with no direct oversight</li>
<li>Lead technical discussions with clients to analyze needs, understand engineering requirements, and ensure satisfaction</li>
<li>Serve as the escalation point for complex issues and mentor Associate, Level I, and Level II Engineers</li>
<li>Monitor and approve timecards, perform performance reviews, and provide career development guidance for team members</li>
<li>Identify and communicate cross-sell and up-sell opportunities across services</li>
<li>Contribute to thought leadership, oversee the creation of Standard Operating Procedures, and provide input on service portfolio expansion </li>
</ul>
 Qualifications 
<ul>
<li>Currently holds a TS/SCI with a Full Scope polygraph</li>
<li>Bachelor's degree in a related field or at least 8 years of related work experience</li>
<li>Ping Identity Certified Professional/Expert for PingFederate, PingAccess, PingDirectory, PingOne</li>
<li>Experience operating in classified environments</li>
<li>Strong understanding of governance, compliance, and leadership concepts</li>
<li>Experience leading engineering teams, handling tasking, resolving personnel issues, and providing actionable feedback</li>
<li>Excellent communication skills to convey complex technical concepts to varied audiences</li>
<li>Strong problem-solving abilities with keen attention to detail</li>
<li>Willingness to travel to meet client needs </li>
</ul>
 Compensation &amp; Benefits We offer a benefits package designed to support work/life balance and continued professional growth: 
<ul>
<li>Work/life balance</li>
<li>Professional training resources</li>
<li>Opportunities to solve unique, complex projects through creative problem-solving</li>
<li>Volunteer opportunities through an employee community program</li>
<li>Ability and technology to work remotely/from home, where applicable </li>
</ul>
 Location: Baltimore, MD 
<ul>
<li>Schedule: Senior leadership role with time allocated as: 80% engagement delivery, 10% team management, 5% corporate strategy, 5% training</li>
<li>Perks: Lead technical projects in classified environments with Ping Identity technologies and mentor engineering teams</li>
<li>Travel: Required to meet client needs </li>
</ul>
 Salary $206,000 per year.

<h3>Job Description</h3>
Job Description We are seeking an accomplished Sr. Ping Engineer to lead the delivery of client engagements with a focus on providing exceptional value through mastery of Ping Identity technologies. This role requires an individual who operates independently without direct supervision, leads teams of engineers in their operations and career development, and serves as the most senior technical resource on projects. Responsibilities 
<ul>
<li>Maintain master's-level understanding of Ping Identity technologies (PingFederate, PingAccess, PingDirectory, PingOne)</li>
<li>Lead a team of engineers in developing workflows to tackle complex issues and solve problems efficiently</li>
<li>Execute all tasks outlined in the scope of work and follow standard operating procedures with no direct oversight</li>
<li>Lead technical discussions with clients to analyze needs, understand engineering requirements, and ensure satisfaction</li>
<li>Serve as the escalation point for complex issues and mentor Associate, Level I, and Level II Engineers</li>
<li>Monitor and approve timecards, perform performance reviews, and provide career development guidance for team members</li>
<li>Identify and communicate cross-sell and up-sell opportunities across services</li>
<li>Contribute to thought leadership, oversee the creation of Standard Operating Procedures, and provide input on service portfolio expansion </li>
</ul>
 Qualifications 
<ul>
<li>Currently holds a TS/SCI with a Full Scope polygraph</li>
<li>Bachelor's degree in a related field or at least 8 years of related work experience</li>
<li>Ping Identity Certified Professional/Expert for PingFederate, PingAccess, PingDirectory, PingOne</li>
<li>Experience operating in classified environments</li>
<li>Strong understanding of governance, compliance, and leadership concepts</li>
<li>Experience leading engineering teams, handling tasking, resolving personnel issues, and providing actionable feedback</li>
<li>Excellent communication skills to convey complex technical concepts to varied audiences</li>
<li>Strong problem-solving abilities with keen attention to detail</li>
<li>Willingness to travel to meet client needs </li>
</ul>
 Compensation &amp; Benefits We offer a benefits package designed to support work/life balance and continued professional growth: 
<ul>
<li>Work/life balance</li>
<li>Professional training resources</li>
<li>Opportunities to solve unique, complex projects through creative problem-solving</li>
<li>Volunteer opportunities through an employee community program</li>
<li>Ability and technology to work remotely/from home, where applicable </li>
</ul>
 Location: Columbia, MD 
<ul>
<li>Schedule: Senior leadership role with time allocated as: 80% engagement delivery, 10% team management, 5% corporate strategy, 5% training</li>
<li>Perks: Lead technical projects in classified environments with Ping Identity technologies and mentor engineering teams</li>
<li>Travel: Required to meet client needs </li>
</ul>
 Salary $206,000 per year.

<h3>Job Description</h3>
Job Description
Thank you for considering IT Concepts dba Kentro, where innovation drives opportunity and collaboration leads to success. Our dynamic community of experts is fully committed to advancing our customers' missions, fostering professional growth, and making a positive impact on our communities. 
By joining our supportive community, you will find that Kentro is dedicated to your personal and professional development. Together, we can drive meaningful change, spark innovation, and achieve extraordinary milestones.
Kentro is hiring an Identity (Cyber) Engineer who will be a hands-on technical specialist responsible for the implementation, configuration, and management of the core platforms that secure user and system identities across the enterprise. This role focuses on the "hands-on-keyboard" execution of deploying and maintaining the security policies and controls within the organization's Identity Providers (IdP), Privileged Access Management (PAM), and Identity Governance and Administration (IGA) solutions. The ideal candidate will have deep technical expertise in one or more of these domains and a strong commitment to implementing least-privilege access in a complex hybrid environment.
Responsibilities (Hands-on Implementation):
Identity Provider and Authentication Management:
<ul>
<li>Microsoft: Design, build, test, and deploy Microsoft Entra ID Conditional Access policies to enforce Zero Trust principles for access to cloud resources in Azure and AWS. Configure and maintain Certificate-Based Authentication (CBA) for CAC/PKI. Manage and troubleshoot the on-premises ADFS environment for legacy application support.</li>
<li>Ping Federate: Configure and manage the Ping Federate platform as an enterprise federation gateway. Onboard new applications for Single Sign-On (SSO) using SAML and OIDC. Build and maintain authentication policies to enforce strong, phishing-resistant MFA.</li>
</ul>
Privileged Access Management (PAM):
<ul>
<li>Delinea: Perform the hands-on onboarding of all privileged user, service, and application accounts into the Delinea vault.</li>
<li>Configure and enforce Delinea policies for credential rotation, session recording, and monitoring.</li>
<li>Build and implement Just-in-Time (JIT) and Just-Enough-Administration (JEA) access request and approval workflows to eliminate standing privileges.</li>
</ul>
Identity Governance and Administration (IGA):
<ul>
<li>SailPoint: Implement and configure the automation of the Joiner-Mover-Leaver (JML) identity lifecycle process, replacing manual, ticket-based systems.</li>
<li>Build and maintain the enterprise access catalog in SailPoint to replace the manual IMT48 form with an automated, workflow-driven request and approval system.</li>
<li>Configure and execute periodic access certification campaigns for critical applications and privileged roles.</li>
</ul>
AD and Linux Identity Management:
<ul>
<li>One Identity ARS: Use the Active Roles console to implement secure, delegated administration for Active Directory, creating policies to automate user/group lifecycle tasks.</li>
<li>Red Hat IdM: Centrally manage authorization policies for the Linux estate, defining Host-Based Access Control (HBAC) rules and sudo policies to control access to RHEL servers.</li>
</ul>
Location: Onsite in Tampa, FL
Requirements
<ul>
<li>Deep, hands-on experience with at least one of the following core platforms: Microsoft Entra ID, an enterprise PAM solution (e.g., Delinea), or an enterprise IGA solution (e.g., SailPoint).</li>
<li>Strong understanding of core identity security principles, including least privilege, MFA, JIT/JEA, and RBAC/ABAC.</li>
<li>Experience with Active Directory administration and group policy management.</li>
<li>Ability to implement and troubleshoot complex security policies within enterprise tools.</li>
<li>DoD 8140 Compliance (IAT Level II)</li>
<li>Education: MA/MS</li>
<li>Years: 10+ years of relevant experience</li>
</ul>
Preferred:
<ul>
<li>Microsoft Certified: Identity and Access Administrator (SC-300).</li>
<li>Delinea Certified Administrator.</li>
<li>SailPoint Certified IdentityNow Engineer.</li>
<li>Ping Certified Professional.</li>
<li>Experience with Red Hat IdM policy management.</li>
</ul>
Clearance Requirement:
<ul>
<li>Active Top-Secret clearance with SCI eligibility.</li>
</ul>
Benefits
The Company
We believe in generating success collaboratively, enabling long-term mission success, and building trust for the next challenge. With you as our partner, let’s solve challenges, think innovatively, and maximize impact. As a valued member of our team, you have the unique opportunity to work in a diverse range of technology and business career paths, all while supporting our nation and delivering innovative technology solutions. We are a close community of experts that pride ourselves on creating an environment defined by teamwork, dedication, and excellence.
We hold three ISO certifications (27001:2013, 20000-1:2011, 9001:2015), two CMMI ML 3 ratings (DEV and SVC) and CMMC Level 2 Certification. 
Industry Recognition
Growth | Inc 5000’s Fastest Growing Private Companies, DC Metro List Fastest Growing; Washington Business Journal: Fastest Growing Companies, Top Performing Small Technology Companies in Greater D.C.
Culture | Northern Virginia Technology Council Tech 100 Honoree; Virginia Best Place to Work; Washington Business Journal: Best Places to Work, Corporate Diversity Index Winner – Mid-Size Companies, Companies Owned by People of Color; Department of Labor’s HireVets for our work helping veterans transition; SECAF Award of Excellence finalist; Victory Military Friendly Brand; Virginia Values Veterans (V3); Cystic Fibrosis Foundation Corporate Breath Award
Benefits
We offer competitive benefits package including paid time off, healthcare benefits, supplemental benefits, 401k including an employer match, discount perks, rewards, and more. We invest in our employees – Every employee is eligible for education reimbursement for certifications, degrees, or professional development. Reimbursement amounts may fluctuate due to IRS limitations. We want you to grow as an expert and a leader and offer flexibility for you to take a course, complete a certification, or other professional growth and networking. We are committed to supporting your curiosity and sustaining a culture that prioritizes commitment to continuous professional development.
We work hard; we play hard. Kentro is committed to incorporating fun into every day. We dedicate funds for activities – virtual and in-person – e.g., we host happy hours, holiday events, fitness &amp; wellness events, and annual celebrations. In alignment with our commitment to our communities, we also host and attend charity galas/events. We believe in appreciating your commitment and building a positive workspace for you to be creative, innovative, and happy.
Commitment Equal Opportunity Employment &amp; VEVRAA 
Kentro is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state or local law.
Kentro is strongly committed to compliance with VEVRAA and other applicable federal, state, and local laws governing equal employment opportunity. We have developed comprehensive policies and procedures to ensure our hiring practices align with these requirements.
As part of our VEVRAA compliance efforts, Kentro has established an equal opportunity plan outlining our commitment to recruiting, hiring, and advancing protected veterans. This plan is regularly reviewed and updated to ensure its effectiveness.
We encourage protected veterans to self-identify during the application process. This information is strictly confidential and will only be used for reporting and compliance purposes as required by law. Providing this information is voluntary and will not impact your employment eligibility.
Our commitment to equal employment opportunity extends beyond legal compliance. We are dedicated to fostering an inclusive workplace where all employees, including protected veterans, are treated with dignity, respect, and fairness.
How to Apply
To apply to Kentro Positions- Please click on the: “Apply for this Job” button at the bottom of this Job Description or the button at the top: “Application.” Please upload your resume and complete all the application steps. You must submit the application for Kentro to consider you for a position. If you need alternative application methods, please email <a href="mailto:careers@kentro.us" target="_blank">careers@kentro.us</a> and request assistance. 
Accommodations
To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. Reasonable Accommodations may be made to enable qualified individuals with disabilities to perform the essential functions. If you need to discuss reasonable accommodations, please email <a href="mailto:careers@kentro.us" target="_blank">careers@kentro.us</a>.

793 ping identity Jobs