Senior Migration / Systems Engineer

We are seeking an experienced Senior Migration / Systems Engineer with strong expertise in Identity and Access Management (IAM), Single Sign-On (SSO), and enterprise authentication technologies.

The ideal candidate will support a large-scale authentication integration migration initiative, transitioning existing identity federation integrations from PingFederate to Microsoft Entra ID (Azure Active Directory).

This role requires hands-on experience with enterprise identity platforms, authentication protocols, application integrations, and complex SSO migration activities., * Assess existing PingFederate integrations and identify migration requirements, technical gaps, risks, and dependencies.

• Support the migration of approximately 1,600 production and non-production authentication integrations to Microsoft Entra ID.
• Configure and manage Microsoft Entra application registrations, claims, attributes, permissions, authentication policies, and directory synchronization.
• Develop repeatable migration approaches for SAML, OAuth, OIDC, WebLogic, Spring, Apache, and SaaS applications.
• Collaborate with application owners and development teams to update, test, and validate authentication integrations.
• Support migration activities across DEV, PRE-PROD, and PROD environments.
• Troubleshoot complex authentication issues involving RSA dependencies, token exchanges, custom SAML configurations, and certificate-based authentication.
• Support RSA authentication assessment and replacement planning.
• Assist with secure testing procedures, privileged identities, administrative YubiKeys, PIV authentication, and access approvals.
• Prepare technical documentation, architecture diagrams, implementation procedures, testing plans, rollback procedures, and migration-related documentation.

• Strong experience with Microsoft Entra ID (Azure Active Directory).
• Hands-on experience with PingFederate or similar identity federation platforms.
• Strong understanding of Identity and Access Management (IAM) and Single Sign-On (SSO).
• Experience with SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and LDAP.
• Experience with application registrations, claims, attributes, permissions, and authentication policies.
• Knowledge of certificate-based authentication, RSA authentication, PIV, and YubiKey.
• Experience supporting enterprise application integrations and authentication migration projects.
• Strong troubleshooting, analytical, and problem-solving skills., * Experience with PingFederate-to-Microsoft Entra ID migrations.
• Experience with Okta, ADFS, ForgeRock, or similar identity management platforms.
• Knowledge of WebLogic, Spring, Apache, iWeb, and SaaS application integrations.
• Experience with large-scale enterprise IAM / SSO migration programs.
• Knowledge of privileged identity management and secure authentication practices.
• Strong communication and collaboration skills.