Senior DevOps Engineer

🔥 21 hours ago

🇺🇸 United States – Remote

⏰ Full Time

🟠 Senior

⛑ DevOps & Site Reliability Engineer (SRE)

👻 Ghost score 10%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Endava

WebsiteLinkedInAll Job Openings

10,000+ employees

Founded 2000

🏥 Healthcare

📣 Marketing

📦 Logistics

💰 Post-IPO Debt on 2023-02

Healthcare • Marketing • Logistics

Endava is a technology company that partners with clients to drive meaningful change through innovative technological solutions. With over two decades of experience, Endava combines world-class engineering, industry expertise, and a people-centric mindset to transform businesses across various sectors. Specializing in areas such as finance and banking, healthcare, media, and telecommunications, Endava leverages its industry-specific knowledge to create solutions that meet the evolving needs of the market. The company is committed to building trusted partnerships and creating positive impacts for both businesses and people.

📋 Description

• Lead, mentor, and technically direct the SSO engineering squad in an Agile/Scrum framework • Partner with Enterprise Architecture and Security Architects to align SSO roadmaps and represent SSO on Architecture Review Boards • Evaluate PingAuthorize and modern IDM/IGA solutions to replace legacy authorization systems • Partner with the Microsoft/M365 team on federation, PRT evaluation, Conditional Access handoffs, and user experience • Maintain 24x7 operational reliability and 99.99%+ high availability for PingFederate, PingDirectory, and PingID infrastructure • Manage PingOne Customer (CIAM) integrations and enterprise workforce authentication across dedicated endpoints, shared clinical kiosks, and Citrix VDI • Onboard and support clinical applications and enterprise SaaS platforms using SAML 2.0, OAuth 2.0, and OIDC • Standardize and automate cryptographic certificate, token-signing, and encryption-key lifecycle management • Lead migration of workforce authentication to PingOne Workforce Cloud • Enforce Client SSO Enterprise Standards and govern application onboarding and exception reviews • Deprecate legacy authentication methods, including migration from ROPC to OAuth 2.0 Authorization Code with PKCE • Architect identity orchestration workflows and user journeys using PingOne DaVinci, adaptive MFA, risk signals, and passwordless authentication • Drive GCP DevOps automation using Terraform, CI/CD pipelines, and containerized deployments on GKE • Maintain readiness for potential future adoption of cloud identity platforms such as Microsoft Entra ID • Streamline developer onboarding through self-service tools, dynamic JWKS key discovery, and CI/CD automation

🎯 Requirements

• 8+ years of dedicated experience in Identity & Access Management (IAM) and enterprise Single Sign-On (SSO) engineering • 2+ years of experience leading engineering squads, mentoring developers, and partnering with Enterprise Architecture and Security Architecture groups • Proven track record supporting high-availability, mission-critical environments • Deep expertise in PingFederate, PingID, PingDirectory, PingCentral, PingOne Workforce Cloud, PingOne Customer (CIAM), and PingOne DaVinci • Solid understanding of fine-grained authorization (ABAC/PBAC) and modern externalized authorization platforms such as PingAuthorize • Expert mastery of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), JWT, and SCIM • Deep knowledge of modern grant flows, including Auth Code + PKCE and Token Exchange, and legacy grant remediation • Strong familiarity with Microsoft 365 federation, Hybrid Identity, and Microsoft Entra ID concepts including Conditional Access, Intune, and PRT • Experience designing session policies, Single Logout (SLO), and MFA rules for corporate laptops, shared clinical workstations, and Citrix VDI • Strong hands-on DevOps expertise in Google Cloud Platform (GCP), including Terraform, Kubernetes (GKE), Docker, CI/CD pipeline automation, REST APIs, Python, PowerShell, and Bash • Healthcare and HIPAA compliance experience preferred • Preferred certifications: Ping Identity Certified Professional / Architect, Microsoft Certified Identity and Access Administrator Associate (SC-300), Cybersecurity Architect Expert (SC-100), Google Cloud Professional Cloud DevOps Engineer / Cloud Security Engineer, CISSP, CIAM • Ability to go into corporate or client offices to work onsite, as necessary • For positions requiring business travel and/or event attendance, valid driver’s license and acceptable driving record required

🏖️ Benefits

• Competitive salary package • Share plan • Company performance bonuses • Value-based recognition awards • Referral bonus • Career coaching • Global career opportunities • Non-linear career paths • Internal development programmes for management and technical leadership • Complex projects • Rotations • Internal tech communities • Training • Certifications • Coaching • Online learning platforms subscriptions • Pass-it-on sessions • Workshops • Conferences • Hybrid work and flexible working hours • Employee assistance programme • Global internal wellbeing programme • Access to wellbeing apps • Global internal tech communities • Hobby clubs and interest groups • Inclusion and diversity programmes • Events and celebrations • Medical, Dental, vision, Disability coverage, and various other benefit options • Flexible Spending Accounts (Medical, Transit, and Dependent Care) • Employer Paid Life Insurance and AD&D Coverages • Health Savings account paired with our low-cost High Deductible Medical Plan • 401(k) Safe Harbor Retirement plan with employer match with immediately vest