We Help the World Be Everyday Ready™

Today's threatscape is relentless. So are we. At Cyderes, we build practical Identity & Access Management (IAM), Exposure Management, and risk programs, helping organizations stop active threats fast with Managed Detection & Response (MDR) that integrates with existing tools. Powering it all is Meridian, our entity fabric that connects identities, assets, and access into one trusted reality. Augmented by AI and driven by experienced operators, our tireless global team arms organizations with the people, platforms, and perspectives they need to conquer whatever tomorrow throws their way.

Great Place to Work® Certified™

Role Summary
Lead Consultant will act as the technical lead and Subject Matter Expert (SME) for federation services, supporting the enterprise IAM application onboarding and change process. The role requires strong hands-on expertise in PingFederate, OAuth 2.0, OpenID Connect (OIDC), SAML, SSO and MFA. The engineer will coordinate the team, serve as the primary technical point of contact, support application teams through federation onboarding and changes, and act as the first point of escalation for complex integration and production issues.

Responsibilities

Act as the Team Lead and Federation SME, providing technical guidance to engineers and serving as the primary point of contact
Provide expertise on OAuth 2.0, OIDC, SAML, SSO, MFA and standard federation patterns
Review and triage requests for:

New OIDC/SAML application onboarding
Federation configuration changes
Token/configuration updates
MFA enablement
Application decommissioning

Validate and refine technical integration requirements with application and Line of Business teams
Configure and deploy federation integrations and changes across environments
Coordinate pre-validation, deployment and post-deployment validation with application teams
Collect validation results and maintain supporting evidence for change and audit requirements
Manage the federation intake queue, deployment schedules and change documentation
Troubleshoot complex federation/authentication issues and act as the first technical escalation point
Maintain runbooks, design documents, configuration standards and operational procedures
Work closely with Security Engineering, Architecture, Operations, Change Management and application teams
Support IAM security controls, compliance requirements and audit activities

Requirements

Strong experience in Identity & Access Management (IAM) and federation technologies
Hands-on experience with PingFederate / Ping Identity federation solutions
Strong knowledge of:

OAuth 2.0
OpenID Connect (OIDC)
SAML 2.0
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
Federation and authentication patterns

Experience troubleshooting authentication, authorization and federation integrations
Understanding of Active Directory, LDAP and directory integrations
Good understanding of authentication and authorization for REST APIs, microservices and web applications
Experience integrating IAM solutions with cloud/SaaS platforms, including Azure, AWS or GCP
Working knowledge of Linux/Unix and Windows environments
Scripting/automation experience using technologies such as Python, Bash, JavaScript or Java

WHY CYDERES
Benefits that go beyond the basics, we support our people so they can do their best work.

Medical Insurance - Employee + dependents covered

Life Insurance - Protection for what matters most

Retirement Match Program - We invest in your future

Hybrid Work Model - 2–3 days in office

Maternity & Paternity Leave - Time for the moments that matter

Paid Time Off - PTO + sick & casual leave

Bereavement & Volunteer Time - Give back to your community

Professional Development - Reimbursement program

LinkedIn L&D Platform - Thousands of courses at your fingertips

Mobile Phone Reimbursement - Stay connected, on us

Cyderes is an Equal Opportunity Employer (EOE). Qualified applicants are considered for employment without regard to race, religion, color, sex, age, disability, sexual orientation, genetic information, national origin, or veteran status.

Note: This job posting is intended for direct applicants only. We request that outside recruiters do not contact us regarding this position.

We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses and identifying potential inconsistencies or verification signals in application materials based on available information. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Lead Consultant, PingFederate