IAM Software Engineer

Responsibilities

• Collaborate with infrastructure, cloud, and security teams to ensure reliable orchestration at scale
• Implement and maintain Ping Identity solutions for seamless SSO, MFA, and adaptive authentication
• Develop and maintain authentication policies, selectors, and adapters to support complex user journeys
• Leverage PingOne DaVinci to orchestrate low-code identity workflows and integrate third-party security services
• Utilize Ping REST APIs and scripting (e.g., Python, Bash) to automate operational tasks, monitoring, and administrative functions
• Support Joiner-Mover-Leaver (JML) processes by integrating Ping stack components with upstream identity sources and downstream SPs
• Collaborate with App Owners and Security teams to migrate legacy applications to modern protocols (OIDC/OAuth 2.0/SAML2.0/SCIM)
• Troubleshoot complex authentication issues, latent LDAP queries, and synchronization errors across the Ping ecosystem
• Create and maintain technical documentation, architecture diagrams, and automated operational run books

Requirements

• 3+ years’ experience in software engineering, IAM engineering, or API platform architecture
• Hands-on experience with the Ping Identity platform, including PingFederate, PingAccess, PingDirectory, and/or PingOne
• Knowledge of identity protocols including SAML, OAuth 2.0, OIDC
• Proficiency in RESTful APIs, JSON, and Postman Tool
• Scripting ability in Bash, PowerShell, Python, or similar

Preferred Qualifications

• Deep understanding of LDAP best practices, specifically with Ping Directory
• Experience in a DevOps environment, treating "Identity as Code" through configuration automation and CI/CD pipelines
• Strong working knowledge of JavaScript for custom business logic implementation
• Advanced use of JSON for IAM related workflow payloads, REST API integrations, and event handling
• Basic proficiency with HTML and CSS for custom UI, branding, and hosted page integration
• Proven experience with Identity Orchestration and modernizing authentication flows (PingOne DaVinci experience is a plus)