Identity and Access Management Specialist

Overview

This contract position focuses on Identity and Access Management (IAM), specifically handling PingUID operations and OneUID Single Sign-On (SSO) platform health within a Canadian on-site environment. The role involves critical monitoring, maintenance, and incident resolution to ensure seamless access management and security protocols.

Key Responsibilities

• Manage IAM PingUID services including ticket handling and system monitoring to maintain platform performance and stability.
• Conduct root cause analysis and manage problems on the OneUID SSO platform, ensuring minimal disruption to end users.
• Analyze reports to identify network or LDAP gateway issues, implement fixes, or escalate to Ping Identity support for resolution.
• Collaborate with vendors to facilitate swift resolution of support cases.
• Support core OneUID services such as PingID multi-factor authentication enrollment, SSL certificate renewals, and new initiatives like passwordless authentication rollouts.
• Maintain and update Identity Provider (IdP) SAML certificate renewals and Service Provider (SP) SAML certificate updates to ensure secure and compliant authentication processes.
• Regularly update the OneUID Wiki to keep documentation current.
• Compile and disseminate weekly reports outlining incident trends, operational metrics, ongoing projects, and analytics on SSO login activity, including user accounts, lockouts, and application access.
• Manage Entra ID SSO and MFA configurations and participate in migrations from PING Federate to Entra.
• Support the onboarding and production deployment of approximately 50 new applications monthly integrating with the SSO platform, following technical documentation from the vendor's Ping Engineering team.
• Oversee ongoing development and change management, including LDAP Gateway version upgrades with subsequent monitoring, and configuration modifications at the Ping Federate level—covering IdP adapters and selectors, HTML/message template updates, authentication policy trees and fragments, OAuth access token managers (ATMs), OIDC policies, and PingID policies.
• Assist with audit and compliance activities, particularly SOX audits quarterly, by providing sanitized screenshots and evidentiary support for SSO integrated applications during audit walkthroughs with internal and external stakeholders.

Additional Information

This role requires comprehensive involvement with security audits, infrastructure upgrades, and close vendor coordination to maintain the integrity and efficiency of IAM services in a dynamic environment.