IAM Engineer (PingFed)

Job Description

We are seeking a Senior Identity DevOps Engineer / IAM Architect to design, implement, support, and modernize our Identity and Access Management (IAM) environment. This role will lead our migration from PingFederate 11.3 to PingOne Workforce while supporting our Zero Trust security strategy.

Responsibilities

• Design, implement, and support enterprise IAM and SSO solutions using Ping Identity technologies.
• Lead the migration from PingFederate to PingOne Workforce.
• Develop custom authentication policies, profiles, scripting, and automation.
• Build and support custom PCVs, data stores, and federation integrations.
• Evaluate and simplify legacy PingFederate implementations.
• Integrate applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and Microsoft Entra ID.
• Support enterprise SSO, MFA, and application onboarding initiatives.
• Automate deployments and operational tasks using Infrastructure as Code and scripting.
• Troubleshoot complex authentication and federation issues.
• Collaborate with security, infrastructure, and application teams to deliver secure, scalable IAM solutions.

Qualifications

• 5–7+ years of hands-on IAM engineering experience.
• Expert knowledge of:
  • PingFederate
  • PingOne SSO
  • PingOne MFA
  • PingOne DaVinci
• Experience designing and building custom PingFederate solutions, including:
  • Authentication policies and profiles
  • Custom scripting
  • Java/J2EE custom adapters
  • PCVs
  • Data stores
  • Federation integrations
• Experience migrating from PingFederate to PingOne Workforce or similar cloud IAM platforms.
• Strong knowledge of Zero Trust principles and modern authentication protocols (SAML, OAuth 2.0, OIDC).
• Experience integrating Microsoft 365 and Microsoft Entra ID.
• Experience with Python, PowerShell, or shell scripting.
• Experience with GKE, Terraform, Helm, Git, Jenkins, Docker, and Kubernetes.
• Strong troubleshooting, production support, and problem-solving skills.

Preferred Qualifications

• PingCentral
• PingOne Protect
• Google Cloud Platform (GCP)
• Oracle Identity Manager (OIM) or Oracle Access Governance (OAG)
• Experience with additional enterprise IAM platforms
• Ping Identity or related security certifications