SSO Federation Engineer || East Princeton, NJ
Savi Technologies LLC
Please share with me suitable profiles.
Role: SSO Federation Engineer
Location: East Princeton, NJ
Role Descriptions: SSO Federation Engineer Manage and enhance enterprise SSO and federation services across SAML| OAuth 2.0| and OpenID Connect ecosystems.Perform vulnerability remediation in SSO layersfix protocolconfig gaps| upgrade components| and harden tokensecurity settings.Configure and onboard applications (IdPSP integrations)| ensuring secure and seamless authentication experience.Provide L2L3 support for authentication issues| federation failures| and certificatemetadata-related incidents.Manage lifecycle activities including patching| certificate renewals| metadata updates| and platform upgrades.Maintain documentation| support audits| and ensure compliance with enterprise IAM and security standards.
Essential Skills: SSO Federation Engineer Manage and enhance enterprise SSO and federation services across SAML| OAuth 2.0| and OpenID Connect ecosystems.Perform vulnerability remediation in SSO layersfix protocolconfig gaps| upgrade components| and harden tokensecurity settings.Configure and onboard applications (IdPSP integrations)| ensuring secure and seamless authentication experience.Provide L2L3 support for authentication issues| federation failures| and certificatemetadata-related incidents.Manage lifecycle activities including patching| certificate renewals| metadata updates| and platform upgrades.Maintain documentation| support audits| and ensure compliance with enterprise IAM and security standards.
Skills: OpenSSO
Experience Required: 8-10
Role Summary
The SSO / Federation Engineer will design and implement enterprise SSO and federation architecture to enable Microsoft Entra ID as the strategic workforce entry point. The role bridges multiple disconnected identity providers and supports coexistence, migration, and application onboarding.
________________________________________
Key Responsibilities
• Design target state SSO and federation architecture with Entra ID as entry point.
• Implement federation between Entra ID, ForgeRock, RSA, and ADFS.
• Onboard applications using SAML, OIDC, OAuth, WS Fed, RADIUS (where required).
• Define migration and coexistence patterns for legacy and modern applications.
• Perform POCs for complex federation scenarios.
• Troubleshoot federation issues across IDP initiated and SP initiated flows.
• Create onboarding standards, federation patterns, and technical documentation.
________________________________________
Mandatory Skills & Experience
• Strong hands on experience in enterprise SSO and federation engineering.
• Expert knowledge of SAML, OIDC, OAuth, claims, tokens, trust models.
• Hands on experience with Microsoft Entra ID enterprise app integrations.
• Experience with at least one of ForgeRock, ADFS, RSA.
• Strong troubleshooting skills in complex authentication chains.
________________________________________
Preferred Experience
• Experience in large scale IAM transformation or IDP consolidation programs.
• Familiarity with legacy application authentication constraints.
• Exposure to MFA driven federated authentication flows.