General Information:
Available for VISA Sponsorship:No
Day Rate Contract
The Role:
This contract will run for 12-18 months.
Key Responsibilities:
- Relevant experience with SSO Integration & Support.
- Work with application owners to integrate and support SSO using PingFederate and Microsoft Entra ID, applying protocols like SAML, OpenID Connect, and OAuth
- Hands on experience of supporting Single Sign On (SSO) authentication standards, such as one or more of the following: SAML, OpenID Connect or OAuth.
- Hands on experience of integrating applications with Single Sign On using one or more of these applications: PingFederate or Entra ID SSO.
- Application Engagement: Collaborate with owners of 15+ applications to assess current authentication setups, define migration scope, enhance user experience, and guide secure design decisions
- Authentication Protocols: Implement and troubleshoot authentication flows including client credentials, authorization code, and token-based access for APIs
- Security Modernization: Advise on modern access control strategies, including MFA injection points, token lifecycle management, and serverless authentication scenarios
- Testing & Validation: Conduct security testing, validate integration flows, and ensure compliance with internal standards
- Operational Execution: Deliver repeatable, scalable solutions with minimal supervision, supporting app owners, resolving issues, and moving swiftly to the next integration
Key Requirements:
- 3+ years’ experience with SSO Integration & Support.
- Full stack software development experience (front end and back end).
- Experience with working on one or preferably more of the following: Python, C++, Java/J2EE.
- Experience of working in a cloud environment such as Azure and / or AWS.
- A cyber security certification, such as CISSP.PingFederate Expertise: Deep experience with PingFederate and PingAccess, including adaptor configuration, access token management, and client credential reviews
- Protocol Knowledge: Strong understanding of SAML, OpenID Connect, OAuth, REST, and SOAP for API access and identity federation
- Authentication Flows: Clear grasp of client authentication vs. credential flows, and how to handle authentication in serverless or script-based environments
- MFA Implementation: Practical experience injecting MFA into authentication flows, understanding where and how it fits within multi-leg processes
- Cloud & Directory Services: Experience with Microsoft Entra ID (Azure AD), Active Directory, and cloud platforms like Azure/AWS
- Networking & OS: Solid foundation in TCP/IP, Windows/Linux systems, and network infrastructure
- Development & DevOps: Familiarity with Python, Java, Git, CI/CD pipelines, and agile methodologies
- Security Testing: Exposure to security testing frameworks and tools
Successful applicants will also require experience with:
- Version Control tools like Git.
- Continuous Integration/Continuous Deployment (CI/CD).
- Agile methodologies.