Senior IAM Engineer (Ping Identity/CIAM)
Deloitte · Princeton, NJ · 3 wk ago
HybridFull-time
We need to output HTML fragment with sections: headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections with real content. We need to parse the posting.
Posting text:
"Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. Work you'll do In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units On call 24x7 responsibilities The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived. Qualifications Do you possess the following?: Minimum 5 years' experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform. Minimum 2 years' hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript. Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources. Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts). Hands-on experience installing and configuring Identity and Access Management (IAM/CIAM) products. Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC). Willingness to participate in a rotating 24x7x365 on-call schedule. Advanced knowledge of LDAP and directory services, application servers, and network infrastructure. Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third-party applications. Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes. Limited immigration sponsorship may be available."
We need to extract sections: About the role (maybe the intro), Responsibilities (the bullet list after "Work you'll do" and "This position collaborates..."), Qualifications (the list after "Qualifications Do you possess the following?:"), maybe Skills (some overlapping). Benefits, Pay, Schedule: we have mention of "Willingness to participate in a rotating 24x7x365 on-call schedule." That's schedule info. Also "Limited immigration sponsorship may be available." That's a benefit? Could be considered benefit. No explicit pay. So we can include Schedule section with that sentence. Benefits maybe include "Limited immigration sponsorship may be available." Could be considered benefit. But we need to ensure we only include sections with real specific content. "Limited immigration sponsorship may be available." is specific enough. So we can have Benefits section with that.
We also have "On call 24x7 responsibilities" phrase but it's part of responsibilities.
We need to avoid repeating job title. No headings for Job ID.
We need to use
for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections with real content. We need to parse the posting.
Posting text:
"Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. Work you'll do In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units On call 24x7 responsibilities The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived. Qualifications Do you possess the following?: Minimum 5 years' experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform. Minimum 2 years' hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript. Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources. Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts). Hands-on experience installing and configuring Identity and Access Management (IAM/CIAM) products. Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC). Willingness to participate in a rotating 24x7x365 on-call schedule. Advanced knowledge of LDAP and directory services, application servers, and network infrastructure. Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third-party applications. Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes. Limited immigration sponsorship may be available."
We need to extract sections: About the role (maybe the intro), Responsibilities (the bullet list after "Work you'll do" and "This position collaborates..."), Qualifications (the list after "Qualifications Do you possess the following?:"), maybe Skills (some overlapping). Benefits, Pay, Schedule: we have mention of "Willingness to participate in a rotating 24x7x365 on-call schedule." That's schedule info. Also "Limited immigration sponsorship may be available." That's a benefit? Could be considered benefit. No explicit pay. So we can include Schedule section with that sentence. Benefits maybe include "Limited immigration sponsorship may be available." Could be considered benefit. But we need to ensure we only include sections with real specific content. "Limited immigration sponsorship may be available." is specific enough. So we can have Benefits section with that.
We also have "On call 24x7 responsibilities" phrase but it's part of responsibilities.
We need to avoid repeating job title. No headings for Job ID.
We need to use for section headings. Use - for any list of duties/requirements/benefits. Use
for prose.
We need to preserve all substantive information; do not invent or summarize away detail.
We need to remove boilerplate: cookie/navigation/legal/EEO etc. There's none.
We need to output only HTML fragment.
Let's structure:
About the role
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices; define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units.
But note we need to keep the colon list. Could be better as - . The responsibilities are a list: "ensure secure and efficient access to Deloitte applications while upholding cyber security best practices" and "define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units". So we can put those in
- . Also there is "On call 24x7 responsibilities" phrase maybe part of responsibilities? Actually "On call 24x7 responsibilities" appears before "The team Deloitte Technology works..." Might be a heading but we can treat as part of responsibilities: maybe it's indicating on-call responsibilities. We'll incorporate as a bullet: "Participate in a rotating 24x7 on-call schedule." Actually that appears later under Qualifications. But we have "Willingness to participate in a rotating 24x7x365 on-call schedule." That's schedule.
Thus responsibilities: two bullets.
Now
Responsibilities
- Ensure secure and efficient access to Deloitte applications while upholding cyber security best practices.
- Define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units.
Now Qualifications
We have a list after "Do you possess the following?:" Many items separated by periods. We'll make each a - . Need to keep details.
List:
- Minimum 5 years' experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform.
- Minimum 2 years' hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript.
- Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources.
- Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts).
- Hands-on experience installing and configuring Identity and Access Management (IAM/CIAM) products.
- Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC).
- Willingness to participate in a rotating 24x7x365 on-call schedule.
- Advanced knowledge of LDAP and directory services, application servers, and network infrastructure.
- Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third-party applications.
- Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes.
- Limited immigration sponsorship may be available.
But note the last one is more a benefit/immigration sponsorship; maybe better under Benefits. However it's listed under qualifications? It appears at end of qualifications block. It says "Limited immigration sponsorship may be available." That's a benefit. We'll move to Benefits.
Thus Qualifications list excludes that.
Now Benefits: we have "Limited immigration sponsorship may be available." Also maybe other benefits? Not mentioned. So we can include Benefits section with that.
Schedule: we have "Willingness to participate in a rotating 24x7x365 on-call schedule." That's schedule. Could be separate Schedule section.
But we already used that in Qualifications? Actually we removed it from Qualifications to avoid duplication. We'll put it under Schedule.
Thus Schedule section:
Willingness to participate in a rotating 24x7x365 on-call schedule.
Now Benefits: Limited immigration sponsorship may be available.
Now we need to ensure we don't create sections with filler like "commensurate with experience". Not present.
Now we need to output only HTML fragment.
Let's craft final HTML:
About the role
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to:
- Ensure secure and efficient access to Deloitte applications while upholding cyber security best practices.
- Define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units.
Responsibilities
- Ensure secure and efficient access to Deloitte applications while upholding cyber security best practices.
- Define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units.
But that duplicates the About the role content. Actually About the role already includes that list. We might not need separate Responsibilities if we already covered. But we need to follow instruction: Use headings for sections when posting has real specific content. The posting includes responsibilities (the list). So we should have a Responsibilities section. The About the role could be a brief summary. Let's keep About the role as a paragraph summarizing the role (first sentences). Then Responsibilities as the list.
Thus About the role paragraph: "Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes."
Then Responsibilities list as two items.
Now Qualifications list as above.
Schedule: one paragraph.
Benefits: one paragraph.
Now ensure we didn't miss any substantive info: The phrase "On call 24x7 responsibilities" maybe we should incorporate as part of responsibilities? Already we have schedule. The phrase "On call 24x7 responsibilities" appears before "The team Deloitte Technology works..." Might be just a heading. We'll ignore as it's not substantive.
Also "The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in "what is" but rather "what can be" to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived." This is descriptive about the team; could be part of About the role or maybe a separate section like "About the team". But we only have allowed headings: About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. We could put that descriptive text under About the role as additional prose. Let's incorporate into About the role paragraph after the first sentences.
Thus About the role: combine:
"Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. The team Deloitte Technology works at the forefront of technology development and processes to support and protect Deloitte around the world. In this truly global environment, we operate not in 'what is' but rather 'what can be' to help Deloitte deliver and connect with its clients, its communities, and one another in ways not previously conceived."
That preserves all.
Now Responsibilities: list as earlier.
Qualifications: list as earlier (excluding immigration sponsorship and on-call schedule). Let's list all qualifications items:
- Minimum
- for any list of duties/requirements/benefits. Use
for prose. We need to preserve all substantive information; do not invent or summarize away detail. We need to remove boilerplate: cookie/navigation/legal/EEO etc. There's none. We need to output only HTML fragment. Let's structure:
About the role
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to: ensure secure and efficient access to Deloitte applications while upholding cyber security best practices; define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units.
But note we need to keep the colon list. Could be better as- . The responsibilities are a list: "ensure secure and efficient access to Deloitte applications while upholding cyber security best practices" and "define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units". So we can put those in
- . Also there is "On call 24x7 responsibilities" phrase maybe part of responsibilities? Actually "On call 24x7 responsibilities" appears before "The team Deloitte Technology works..." Might be a heading but we can treat as part of responsibilities: maybe it's indicating on-call responsibilities. We'll incorporate as a bullet: "Participate in a rotating 24x7 on-call schedule." Actually that appears later under Qualifications. But we have "Willingness to participate in a rotating 24x7x365 on-call schedule." That's schedule.
Thus responsibilities: two bullets.
Now
Responsibilities
- Ensure secure and efficient access to Deloitte applications while upholding cyber security best practices.
- Define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units.
Qualifications
We have a list after "Do you possess the following?:" Many items separated by periods. We'll make each a - . Need to keep details.
List:
- Minimum 5 years' experience with leading CIAM vendors preferably Azure Entra Id and Ping Identity Platform.
- Minimum 2 years' hands-on Java development experience (Java/J2EE); familiarity with Groovy and/or JavaScript.
- Proven experience customizing PingAM UI, writing scripts, and developing code to retrieve/assert values from multiple data sources.
- Experience building, testing (functional and robustness), and promoting custom Java components using the PingAM and PingIDM SDK to production (for example: modules, trees, STS, policies, connectors, scripts).
- Hands-on experience installing and configuring Identity and Access Management (IAM/CIAM) products.
- Working knowledge of authentication standards and frameworks: SAML, OAuth 2.0, and OpenID Connect (OIDC).
- Willingness to participate in a rotating 24x7x365 on-call schedule.
- Advanced knowledge of LDAP and directory services, application servers, and network infrastructure.
- Experience integrating and deploying IAM solutions for web and mobile applications to support authentication and authorization, including SSO integrations with internal and third-party applications.
- Experience with container technologies: Docker installation and configuration, and orchestration using Kubernetes.
- Limited immigration sponsorship may be available.
But note the last one is more a benefit/immigration sponsorship; maybe better under Benefits. However it's listed under qualifications? It appears at end of qualifications block. It says "Limited immigration sponsorship may be available." That's a benefit. We'll move to Benefits.
Thus Qualifications list excludes that.
Now Benefits: we have "Limited immigration sponsorship may be available." Also maybe other benefits? Not mentioned. So we can include Benefits section with that.
Schedule: we have "Willingness to participate in a rotating 24x7x365 on-call schedule." That's schedule. Could be separate Schedule section.
But we already used that in Qualifications? Actually we removed it from Qualifications to avoid duplication. We'll put it under Schedule.
Thus Schedule section:
Willingness to participate in a rotating 24x7x365 on-call schedule.
Now Benefits:Limited immigration sponsorship may be available.
Now we need to ensure we don't create sections with filler like "commensurate with experience". Not present. Now we need to output only HTML fragment. Let's craft final HTML:About the role
Deloitte Global is the engine of the Deloitte network. Our professionals reach across disciplines and borders to develop and lead global initiatives. We deliver strategic programs and services that unite our organization. In this interesting and diverse role, you'll be engaging in the development, implementation and support of systems that manage digital identities, access controls and authentication processes. This position collaborates with team members to:
- Ensure secure and efficient access to Deloitte applications while upholding cyber security best practices.
- Define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units.
Responsibilities
- Ensure secure and efficient access to Deloitte applications while upholding cyber security best practices.
- Define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units.
- . Also there is "On call 24x7 responsibilities" phrase maybe part of responsibilities? Actually "On call 24x7 responsibilities" appears before "The team Deloitte Technology works..." Might be a heading but we can treat as part of responsibilities: maybe it's indicating on-call responsibilities. We'll incorporate as a bullet: "Participate in a rotating 24x7 on-call schedule." Actually that appears later under Qualifications. But we have "Willingness to participate in a rotating 24x7x365 on-call schedule." That's schedule.
Thus responsibilities: two bullets.
Now
- . The responsibilities are a list: "ensure secure and efficient access to Deloitte applications while upholding cyber security best practices" and "define the future vision of how identities and assigned access is managed, enforced and reported upon across all functional business units". So we can put those in