Senior IAM Engineer (Ping Identity/CIAM)
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. The posting includes: "Work you'll do" (maybe About the role). Then bullet list of responsibilities: "This position collaborates with team members to: ensure secure and efficient access ... define the future vision ...". Also "On call 24x7 responsibilities" maybe part of responsibilities. Then "The team Deloitte Technology works..." maybe About the role description. Then "Qualifications" heading present. Then list of qualifications. Also "Willingness to participate in a rotating 24x7x365 on-call schedule." That's a qualification/requirement. Also "Limited immigration sponsorship may be available." That's maybe a benefit? Could be considered a benefit but it's limited. The instruction: include Pay/Schedule/Benefits only if posting actually states them. There's mention of on-call schedule (24x7x365) but not a regular schedule. There's no explicit Pay or Benefits besides limited immigration sponsorship. Should we create a Benefits section? The posting mentions "Limited immigration sponsorship may be available." That's a benefit-ish but it's not a standard benefit like health insurance. The instruction: "never create Pay/Schedule/Benefits sections unless the posting actually states them." It does state limited immigration sponsorship, which could be considered a benefit. But we need to decide if that's enough to create a Benefits section. The instruction says "Prefer a few substantive sections over many thin ones." So maybe we can include a Benefits section with that item. However, we need to ensure we don't create a section with filler like "not specified". The immigration sponsorship is specific enough.
Also we need to include About the role (maybe from first paragraph). Responsibilities (the bullet list). Qualifications (the list). Possibly Skills? The qualifications list includes many skills; we could treat that as Qualifications. Could also have a Skills section separate but we can combine.
We must not repeat job title as heading. No Job ID.
We must use for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We need to preserve all substantive information; do not invent or summarize away detail. So we need to include all details from the posting, except boilerplate.
Let's extract content:
First paragraph: "Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization."
Second: "Work you'll do In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units"
Third: "On call 24x7 responsibilities" maybe a heading but we can treat as part of responsibilities.
Then: "The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived."
Then "Qualifications" heading and list:
- Minimum 5 years' experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform.
- Minimum 2 years' hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript.
- Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources.
- Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts).
- Hands-on experience installing and configuring Identity and Access Management (IAM/CIAM) products.
- Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC).
- Willingness to participate in a rotating 24x7x365 on-call schedule.
- Advanced knowledge of LDAP and directory services, application servers, and network infrastructure.
- Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third-party applications.
- Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes.
- Limited immigration sponsorship may be available.
We need to decide where to put "Limited immigration sponsorship may be available." It could be a benefit. Could also be a qualification? It's more like a benefit/note. We'll put it under Benefits.
Now we need to decide sections:
- About the role: combine first two paragraphs (Deloitte Global description + Work you'll do). Could be a prose
.
- Responsibilities: bullet list of duties: ensure secure and efficient access..., define the future vision..., plus maybe On call 24x7 responsibilities? Actually "On call 24x7 responsibilities" maybe a heading but we can incorporate as a bullet: "Participate in rotating 24x7 on-call schedule." But that's also in qualifications. Might duplicate. We'll keep responsibilities as the two bullet points from "This position collaborates with team members to:".
- Qualifications/Skills: list all qualification items except the on-call schedule (maybe keep there) and immigration sponsorship.
But we need to avoid duplication. The on-call schedule appears both as a qualification and maybe as responsibility. We'll keep it under Qualifications.
- Benefits: limited immigration sponsorship.
We should not include Schedule section because no regular schedule given. The on-call schedule is a qualification, not a schedule section.
We need to ensure we don't create empty sections.
Thus output:
About the role
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices; define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units.
But we need to keep the original wording exactly? We must preserve ALL substantive information; do not invent or summarize away detail. We can rephrase slightly but must not lose detail. Safer to keep sentences as they are, maybe combine but not lose. Let's copy the text exactly as given, but we need to ensure proper punctuation.
Original: "Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. Work you'll do In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units"
There is a missing punctuation after "best practices". We'll keep as is but maybe add a semicolon for readability? That would be inventing detail. Better to keep exactly as given, but we need to separate sentences for readability. The original lacks a space after "best practices". Actually it's: "best practices define". We'll keep that.
We'll wrap in and keep the text exactly.
Similarly for team description: "The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived."
We could include that in About the role as well.
Thus About the role paragraph could be two paragraphs? But we can combine into one
with both paragraphs separated by a space. It's okay.
Now Responsibilities: The bullet list from "This position collaborates with team members to:" includes two items: ensure secure and efficient access... ; define the future vision... We'll make
- each.
Also maybe "On call 24x7 responsibilities" could be a responsibility bullet: "Participate in rotating 24x7 on-call schedule." But that's also in qualifications. To avoid duplication, we could keep it only under Qualifications. The instruction says preserve ALL substantive information; we must not lose the on-call schedule mention. It appears in qualifications list, so we keep it there.
Thus responsibilities section only those two items.
Qualifications: list all qualification items (including on-call schedule and limited immigration sponsorship? Actually immigration sponsorship is not a qualification but a benefit. We'll keep it under Benefits.)
Thus Qualifications list items:
- Minimum 5 years' experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform.
- Minimum 2 years' hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript.
- Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources.
- Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts).
- Hands-on experience installing and configuring Identity and Access Management (IAM/CIAM) products.
- Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC).
- Willingness to participate in a rotating 24x7x365 on-call schedule.
- Advanced knowledge of LDAP and directory services, application servers, and network infrastructure.
- Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third-party applications.
- Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes.
We need to keep the exact phrasing.
Now Benefits: "Limited immigration sponsorship may be available."
We'll make a
- for that.
Now ensure we don't include any boilerplate like EEO etc. Not present.
Now output only HTML fragment.
Let's craft:
About the role
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. Work you'll do In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units. The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
Responsibilities
- ensure secure and efficient access to Deloitte applications while upholding cyber security best practices
- define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units
Qualifications
- for any list of duties/requirements/benefits. Use
for prose. We need to preserve all substantive information; do not invent or summarize away detail. So we need to include all details from the posting, except boilerplate. Let's extract content: First paragraph: "Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization." Second: "Work you'll do In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units" Third: "On call 24x7 responsibilities" maybe a heading but we can treat as part of responsibilities. Then: "The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived." Then "Qualifications" heading and list: - Minimum 5 years' experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform. - Minimum 2 years' hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript. - Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources. - Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts). - Hands-on experience installing and configuring Identity and Access Management (IAM/CIAM) products. - Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC). - Willingness to participate in a rotating 24x7x365 on-call schedule. - Advanced knowledge of LDAP and directory services, application servers, and network infrastructure. - Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third-party applications. - Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes. - Limited immigration sponsorship may be available. We need to decide where to put "Limited immigration sponsorship may be available." It could be a benefit. Could also be a qualification? It's more like a benefit/note. We'll put it under Benefits. Now we need to decide sections: - About the role: combine first two paragraphs (Deloitte Global description + Work you'll do). Could be a prose
. - Responsibilities: bullet list of duties: ensure secure and efficient access..., define the future vision..., plus maybe On call 24x7 responsibilities? Actually "On call 24x7 responsibilities" maybe a heading but we can incorporate as a bullet: "Participate in rotating 24x7 on-call schedule." But that's also in qualifications. Might duplicate. We'll keep responsibilities as the two bullet points from "This position collaborates with team members to:". - Qualifications/Skills: list all qualification items except the on-call schedule (maybe keep there) and immigration sponsorship. But we need to avoid duplication. The on-call schedule appears both as a qualification and maybe as responsibility. We'll keep it under Qualifications. - Benefits: limited immigration sponsorship. We should not include Schedule section because no regular schedule given. The on-call schedule is a qualification, not a schedule section. We need to ensure we don't create empty sections. Thus output:
About the role
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices; define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units.
But we need to keep the original wording exactly? We must preserve ALL substantive information; do not invent or summarize away detail. We can rephrase slightly but must not lose detail. Safer to keep sentences as they are, maybe combine but not lose. Let's copy the text exactly as given, but we need to ensure proper punctuation. Original: "Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. Work you'll do In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units" There is a missing punctuation after "best practices". We'll keep as is but maybe add a semicolon for readability? That would be inventing detail. Better to keep exactly as given, but we need to separate sentences for readability. The original lacks a space after "best practices". Actually it's: "best practices define". We'll keep that. We'll wrap inand keep the text exactly. Similarly for team description: "The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived." We could include that in About the role as well. Thus About the role paragraph could be two paragraphs? But we can combine into one
with both paragraphs separated by a space. It's okay. Now Responsibilities: The bullet list from "This position collaborates with team members to:" includes two items: ensure secure and efficient access... ; define the future vision... We'll make
- each.
Also maybe "On call 24x7 responsibilities" could be a responsibility bullet: "Participate in rotating 24x7 on-call schedule." But that's also in qualifications. To avoid duplication, we could keep it only under Qualifications. The instruction says preserve ALL substantive information; we must not lose the on-call schedule mention. It appears in qualifications list, so we keep it there.
Thus responsibilities section only those two items.
Qualifications: list all qualification items (including on-call schedule and limited immigration sponsorship? Actually immigration sponsorship is not a qualification but a benefit. We'll keep it under Benefits.)
Thus Qualifications list items:
- Minimum 5 years' experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform.
- Minimum 2 years' hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript.
- Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources.
- Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts).
- Hands-on experience installing and configuring Identity and Access Management (IAM/CIAM) products.
- Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC).
- Willingness to participate in a rotating 24x7x365 on-call schedule.
- Advanced knowledge of LDAP and directory services, application servers, and network infrastructure.
- Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third-party applications.
- Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes.
We need to keep the exact phrasing.
Now Benefits: "Limited immigration sponsorship may be available."
We'll make a
- for that.
Now ensure we don't include any boilerplate like EEO etc. Not present.
Now output only HTML fragment.
Let's craft:
About the role
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. Work you'll do In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units. The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived.
Responsibilities
- ensure secure and efficient access to Deloitte applications while upholding cyber security best practices
- define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units
Qualifications
- for that.
Now ensure we don't include any boilerplate like EEO etc. Not present.
Now output only HTML fragment.
Let's craft:
- each.
Also maybe "On call 24x7 responsibilities" could be a responsibility bullet: "Participate in rotating 24x7 on-call schedule." But that's also in qualifications. To avoid duplication, we could keep it only under Qualifications. The instruction says preserve ALL substantive information; we must not lose the on-call schedule mention. It appears in qualifications list, so we keep it there.
Thus responsibilities section only those two items.
Qualifications: list all qualification items (including on-call schedule and limited immigration sponsorship? Actually immigration sponsorship is not a qualification but a benefit. We'll keep it under Benefits.)
Thus Qualifications list items:
- Minimum 5 years' experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform.
- Minimum 2 years' hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript.
- Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources.
- Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts).
- Hands-on experience installing and configuring Identity and Access Management (IAM/CIAM) products.
- Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC).
- Willingness to participate in a rotating 24x7x365 on-call schedule.
- Advanced knowledge of LDAP and directory services, application servers, and network infrastructure.
- Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third-party applications.
- Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes.
We need to keep the exact phrasing.
Now Benefits: "Limited immigration sponsorship may be available."
We'll make a