Job Description :

We are looking for an experienced IAM Engineer with 8 - 12 years of strong experience in Identity and Access Management (IAM) and hands-on expertise in PingFederate.

The ideal candidate should have a proven track record of designing, engineering, implementing, and supporting enterprise-grade authentication and federation solutions.

The candidate will be responsible for developing and maintaining secure IAM solutions, with a strong focus on PingFederate engineered solutions, SSO, federation protocols, authentication, authorization, and identity lifecycle management.

The role requires strong troubleshooting skills and the ability to work with application, security, infrastructure, and architecture teams.

Key Responsibilities :

- Design, engineer, implement, configure, and support enterprise IAM solutions using PingFederate.

- Develop and maintain SSO and federation solutions using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).

- Configure PingFederate as an Identity Provider (IdP) and Service Provider (SP) based on application requirements.

- Design authentication and federation flows for internal, external, partner, and customer-facing applications.

- Configure and manage OAuth/OIDC clients, authorization servers, scopes, claims, policies, and token configurations.

- Integrate enterprise applications with PingFederate and troubleshoot authentication and federation issues.

- Work with Active Directory, LDAP, databases, and other identity stores for authentication and user lookup.

- Develop and implement authentication policies, adapters, connection configurations, and authentication flows.

- Perform PingFederate upgrades, patching, configuration changes, performance tuning, and production support.

- Analyze and resolve complex SSO, certificate, token, protocol, and authentication-related issues.

- Manage SSL/TLS certificates, signing certificates, encryption certificates, and key rotation for federation integrations.

- Monitor IAM environments and proactively identify availability, security, and performance issues.

- Collaborate with application teams to onboard new applications onto the IAM platform.

- Participate in IAM solution design, architecture discussions, technical assessments, and implementation activities.

- Automate repetitive IAM operational activities using scripting or relevant automation tools.

- Ensure IAM solutions comply with enterprise security standards, policies, and regulatory requirements.

- Prepare technical documentation, solution designs, operational procedures, and troubleshooting guides.

- Participate in incident management, problem management, change management, and production support activities.

Mandatory Technical Skills :

- 8 - 12 years of overall IT experience, with significant experience in Identity & Access Management.

- Strong hands-on experience with PingFederate and enterprise federation solutions.

- Strong understanding of SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).

- Experience implementing and troubleshooting SSO and federated authentication.

- Strong understanding of Identity Provider (IdP) and Service Provider (SP) concepts.

- Experience with PingFederate adapters, authentication policies, connection configurations, claims, and token management.

- Strong experience integrating applications with enterprise IAM platforms.

- Good understanding of Active Directory, LDAP, and identity stores.

- Experience with SSL/TLS certificates, keystores, signing and encryption certificates.

- Strong troubleshooting and debugging skills across application, network, authentication, and federation layers.

- Experience working in large-scale enterprise IAM environments.

Good to Have :

- Experience with other Ping Identity products, such as PingAccess, PingDirectory, or PingID.

- Knowledge of PingOne and cloud-based IAM solutions.

- Experience with API security and API gateways.

- Knowledge of CI/CD and DevOps practices for IAM configuration and deployments.

- Scripting experience in Shell, Python, or PowerShell.

- Exposure to cloud platforms such as AWS, Azure, or GCP.

- Understanding of Zero Trust and modern authentication architectures.

- Experience with IAM monitoring and observability tools.