Description

Role Overview:

This role involves designing, implementing, and maintaining enterprise-level identity and access management (IAM) solutions, primarily utilizing Ping Identity platforms. The engineer will be responsible for authentication, authorization, single sign-on (SSO), and API security across various applications, ensuring adherence to security and compliance standards.

Key Responsibilities:

• Design and implement enterprise authentication and authorization solutions using PingFederate, PingAccess, and PingDirectory.
• Configure and maintain SSO integrations for SaaS, cloud, and on-premises applications.
• Implement federation between internal and external identity providers.
• Configure OAuth and OIDC-based authentication flows.
• Integrate new applications with Ping Identity platforms.
• Configure SAML, OAuth, and OIDC connections.
• Support API security and token-based authentication mechanisms.
• Design authentication policies and access control frameworks.
• Implement MFA and adaptive authentication controls.
• Configure role-based access controls aligned with least privilege principles.
• Troubleshoot authentication, federation, and access-related issues.
• Monitor Ping platform health and performance.
• Perform upgrades, patching, and platform maintenance activities.
• Support production incidents and root cause analysis.
• Ensure adherence to security standards and compliance requirements.
• Support audit activities and access reviews.
• Develop and maintain technical documentation, SOPs, and architecture diagrams.

Required Skills:

• Proficiency in designing and implementing solutions with PingFederate, PingAccess, and PingDirectory.
• Experience with SSO integrations for various application types (SaaS, cloud, on-premises).
• Strong understanding and practical experience with federation, OAuth, and OIDC authentication flows.
• Knowledge of SAML, API security, and token-based authentication mechanisms.
• Experience with Multi-Factor Authentication (MFA), adaptive authentication, and role-based access controls.
• Ability to troubleshoot, monitor, and maintain Ping Identity platform health and performance.
• Understanding of security standards, compliance requirements, and audit processes.

Qualifications:

• [No specific years of experience or education mentioned]

Preferred Skills:

• Experience in BFSI, Healthcare, or other regulated industries.
• Experience with other IAM platforms such as Okta, Entra ID, ForgeRock, Saviynt, or SailPoint

Key Skills

Education

Any Graduate