SSO Deployment Engineer

Job Description 

Single Sign-On (SSO) Deployment Engineer

Job Title: Single Sign-On (SSO) Deployment Engineer

Job Purpose  :  The SSO Deployment Engineer is responsible for implementing, configuring, integrating, testing, and supporting Single Sign-On (SSO) and Identity and Access Management (IAM) solutions across enterprise applications. This is a hands-on engineering and deployment role, not a lead or managerial position. The engineer will work with application, infrastructure, security, and vendor teams to onboard applications to the organization's SSO platform and ensure secure and reliable authentication.

Key Responsibilities

Deploy and configure SSO integrations for enterprise, SaaS, cloud, and internally hosted applications.

Onboard applications to the organization's Identity Provider (IdP) and SSO platform.

Configure and troubleshoot authentication using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation, where applicable.

Work with application owners and vendors to collect integration requirements, metadata, certificates, endpoints, claims, attributes, and authentication requirements.

Configure SAML assertions, claims, attribute mappings, redirect URLs, scopes, and access policies.

Perform end-to-end testing of SSO integrations across development, test/UAT, and production environments. 

Troubleshoot authentication failures, redirect issues, certificate problems, claim/attribute mismatches, session issues, and application-side SSO errors.

Support deployment and configuration of Microsoft Entra ID (Azure AD), Active Directory Federation Services (AD FS), Okta, PingFederate, or similar IAM/SSO platforms, depending on the organization's environment.

Assist with integration of Active Directory, LDAP, and other enterprise identity directories.

Support Multi-Factor Authentication (MFA) and Conditional Access integrations where required.

Coordinate production implementation activities, including change requests, implementation plans, validation, and rollback procedures.

Maintain technical documentation for application integrations, configurations, certificates, dependencies, and troubleshooting procedures.

Monitor SSO services and investigate authentication incidents and service issues.

Support certificate renewals, signing/encryption certificate changes, metadata updates, and other SSO lifecycle activities. 

Work with security and infrastructure teams to ensure integrations comply with organizational security standards. 

Provide post-deployment support and resolve issues identified during application onboarding or production use. 

Participate in incident, problem, and change management processes related to IAM and SSO services.

Required Technical Skills

Hands-on experience implementing or supporting enterprise SSO/IAM solutions.

Good understanding of SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).

Experience with one or more SSO/identity platforms such as Microsoft Entra ID / Azure AD, AD FS, Okta, PingFederate / Ping Identity, ForgeRock, or similar enterprise IAM platforms. 

Understanding of Active Directory, LDAP, DNS, HTTP/HTTPS, SSL/TLS, and digital certificates.

Experience configuring SAML metadata, Entity IDs, ACS URLs, claims, attributes, scopes, redirect URIs, and certificates.

Ability to analyze authentication logs and troubleshoot SSO integration issues.

Familiarity with REST APIs and JSON/XML.

Basic scripting knowledge using PowerShell, Python, Bash, or similar tools is desirable.

Understanding of MFA, identity lifecycle, access control, and authentication security concepts.

Familiarity with ITIL-based incident, problem, and change management processes.

Qualifications

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related discipline, or equivalent practical experience.

Approximately 2-5 years of relevant experience in IAM, SSO, application integration, infrastructure, or security engineering.

Hands-on experience deploying and troubleshooting SSO integrations in enterprise environments is preferred.

Key Competencies

Strong technical troubleshooting and analytical skills.

Ability to work independently on assigned SSO deployments.

Good communication skills for coordinating with application owners, vendors, security teams, and infrastructure teams.

Ability to follow established architecture, security standards, and deployment procedures.

Strong attention to detail when working with authentication configurations and certificates.

Ability to manage multiple application onboarding activities and deployment deadlines