Ping Identity Engineer

The IS Technical Specialist leads the design, implementation, and support of Customer Identity & Access Management (CIAM) solutions across the enterprise. This role provides technical leadership for centralized authentication platforms, delivering secure, scalable, and user-friendly identity services., * Design, implement, and maintain CIAM services including SSO, Identity Federation, and MFA using Ping Identity platforms (PingFederate, PingOne, PingDirectory).

• Lead migrations from legacy identity platforms (e.g., IBM TFIM/WebSEAL) to modern Ping Identity solutions.
• Architect scalable and resilient authentication platforms supporting large identity populations.
• Develop reusable integration patterns using SAML, OAuth, and OIDC, including API and third-party integrations.
• Collaborate with architects, security teams, and application owners to align with enterprise standards.
• Troubleshoot authentication and access issues across CIAM environments.
• Mentor team members and promote knowledge sharing within the SSO engineering team.
• Ensure solutions meet security, privacy, and regulatory requirements.

• Bachelor's degree in Computer Science, Software Engineering, or related field.
• 8+ years of experience in Identity & Access Management or Information Security.
• 5+ years of experience with Ping Identity solutions (PingFederate, PingAccess, PingDirectory, PingOne MFA).
• 3+ years of experience with SAML, OAuth, and OIDC protocols.
• 3+ years of experience integrating SSO and MFA with enterprise applications.
• Experience in a technical leadership role., * Experience with PingOne DaVinci, PingAuthorize, PingDataSync, or identity orchestration platforms.
• Familiarity with FDX/FAPI standards.
• Experience with CI/CD pipelines and Infrastructure-as-Code (e.g., Terraform).
• Development or scripting experience (Java, Python, .NET).
• Experience in hybrid cloud environments.
• Relevant certifications (Ping Identity, CISSP, CISM).