Staff InfoSec Engineer - IAM/ SSO

About The Role

Gap Inc is seeking an SSO Engineer, with 8 years of Identity and Access Management Experience. In this role, you will support the implementation, maintenance, and troubleshooting of Gap’s workforce Enterprise Identity Solutions. You will work closely with IT security, infrastructure, and development teams to ensure smooth and secure authentication experiences across the enterprise.

What You'Ll Do

• Design, develop, implement Gap’s Enterprise Identity solutions using Sailpoint for IGA and Ping Suite of Products for Access management, multifactor authentication and Zero Trust access.
• Work closely with project teams to identify key IAM technical requirements and generate documentations and prepare technical requirements for implementation
• Work with cross-functional teams to Configure, integrate, and maintain SSO and IAM platforms using Ping Federate, Ping ID, Ping Protect, and Ping One.
• Support authentication and identity federation using protocols like SAML, OAuth 2.0, OpenID Connect (OIDC), and LDAP.
• Troubleshoot and resolve IAM issues and understand escalation procedures within the IAM practice and InfoSec organization.
• Monitor IAM systems logs for security threats, performance optimization and Identity metrics
• Assist in automating IAM processes using REST API, PowerShell, Python, or Bash scripting and Java

Who You Are

• 8 years of experience in IT security, identity and access management (IAM), or related fields.
• Basic understanding of IAM and authentication protocols (SAML, OAuth, OIDC, LDAP, SCIM) and zero trust security
• Must have hands on experience in Ping Suite of Products (Ping Federate, Ping ID, Ping Protect, Ping Directory)
• Experience with Active Directory (AD) and LDAP systems
• Basic scripting knowledge (REST API, PowerShell, Python, or Bash scripting and Java) for automation.
• Strong problem-solving and analytical skills.
• Hands-on experience in any IGA tools like Sailpoint, Saviynt,
• Good communication skills and ability to work collaboratively.
• Solid understanding of key information security compliance-related government regulations (including SoX, and PCI)
• Knowledge of Privileged Access Management, Secrets Management and PKI management