> Markdown version of [/jobs/ext/1314846-ciso-technical-lead-sso-engineer](https://www.wearedevelopers.com/jobs/ext/1314846-ciso-technical-lead-sso-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # CISO Technical Lead SSO Engineer - **Company:** Tata Consultancy Services Limited - **Location:** Irving, TX, United States - **Experience:** Expert - **Salary:** $100,000.0 - $130,000.0 - **Contract:** Permanent contract - **Skills:** Active Directory, User Authentication, Cyber Security, Data Governance, Multi-Factor Authentication, Federated Identity Management, Identity and Access Management, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Windows PowerShell, Openid Connect, Azure Active Directory, Runbook, Security Assertion Markup Language (SAML), Scripting, Pingfederate, Information Technology, Vulnerability Analysis - **Published:** July 17, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=71c8547cc388fcde ## About the Role * Bachelor's degree in computer science, Information Security, or a related technical fi eld, or equivalent practical experience. * 5+ years of dedicated experience in Identity and Access Management (IAM), with at least 3 years focused specifically on SSO technologies. * Proficiency in designing, implementing, and managing PingFederate in large-scale enterprise environments. * Understanding and hands-on experience with identity federation protocols such as SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC). * Experience integrating SSO solutions with various applications and identity stores (e.g., Active Directory, Azure AD, LDAP). * Proficiency in scripting languages (e.g., PowerShell, Python) for automation and administration tasks. * Excellent analytical, problem-solving, and communication skills, with the ability to articulate complex technical concepts to both technical and non-technical audiences. * Required: English fluency (oral and written)., Qualifications : BACHELOR OF COMPUTER SCIENCE ## Description 1) CISO Technical Lead - SSO Engineer Services: * Divestiture Strategy & Execution: o Drive development and execution strategies for the secure separation, migration, and integration of PingFederate instances, configurations, and associated identity stores for divested business units. o Plan and implement identity federation solutions to support application access for users transitioning between organizations, ensuring minimal disruption. o Manage the lifecycle of federated trusts, connections, and identity providers/service providers in the context of divestiture, including onboarding and offboarding applications. * PingFederate Implementation & Management: o Design, deploy, configure, and maintain high-availability PingFederate environments across various enterprise landscapes. o Administer PingFederate connections, policies, adapters, selectors, and authentication methods (e.g., SAML, OAuth, OIDC). o Troubleshoot complex SSO authentication, authorization, and federation issues to ensure continuous service availability. * Identity & Access Integration: o Integrate PingFederate with various identity stores such as Active Directory, Azure Active Directory, and LDAP directories. o Collaborate with application owners to onboard new applications and migrate existing ones to the PingFederate SSO platform. o Ensure seamless integration with Multi-Factor Authentication (MFA) solutions. * Security & Compliance: o Implement and enforce security best practices and architectural guidelines for identity federation and SSO solutions. o Ensure that SSO configurations comply with corporate security policies, regulatory requirements, and data governance standards during the divestiture process. o Conduct regular security reviews and vulnerability assessments of the PingFederate environment. * Operational Support & Documentation: o Provide expert-level support for SSO-related incidents and requests, often collaborating with cross-functional IT and security teams. o Develop and maintain comprehensive documentation, architectural diagrams, runbooks, and standard operating procedures (SOPs) for the SSO infrastructure. Deliverables: * Secure Divestiture & Federated Identity Transition * Resilient PingFederate & SSO Platform Operations * Security, Compliance & Operational Excellence ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [Beyond authentication: an open-source trust model for the agentic web](https://www.wearedevelopers.com/videos/100076-beyond-authentication-an-open-source-trust-model-for-the-agentic-web) - [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) ## Related Articles - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)