IAM Architect

Experience: 10+ Years Visa: EAD, TN, L2, E2, (No H1B & OPT) Job Description: We are seeking an experienced Senior IAM PingFederate Engineer to design, deploy, configure, and maintain enterprise Identity and Access Management (IAM) solutions with a heavy focus on Ping Identity products (PingFederate, PingAccess, PingOne, PingDirectory) . The ideal candidate will serve as a Subject Matter Expert (SME) in single sign-on (SSO), federation, multi-factor authentication (MFA), and identity federation across cloud and on-premises environments. Key Responsibilities Architect, configure, and maintain enterprise PingFederate instances across multi-region environments. Manage PingDirectory / PingAccess policy rules, engine configurations, and identity data stores. Enforce Zero-Trust architecture, Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC). Support security incident response, audits, penetration testing remediation, and compliance reporting (SOC2, ISO 27001, GDPR). Required Qualifications & Skills Experience: 10+ years in enterprise Identity & Access Management (IAM) with at least 4 5+ years of hands-on experience dedicated to PingFederate . Federation Protocols: Expert knowledge of SAML 2.0, OAuth 2.0, OIDC, WS-Trust/WS-Fed, and SCIM provisioning. Ping Product Suite: Strong proficiency in PingFederate , PingDirectory , PingAccess , and PingOne/PingID . Directory Services: Deep experience with LDAP directories (PingDirectory, Active Directory, UnboundID). Development/Scripting: Proficiency in Java (for custom adapters), Python , PowerShell , or Bash . Web & Middleware: Hands-on experience with web servers (Apache, Nginx, IIS) and RESTful API authentication models. Networking Security: Understanding of SSL/TLS certificates, reverse proxies, firewalls, and load balancing (F5/AWS ALB). Cloud Infrastructure: Hands-on experience with AWS, Azure, or Google Cloud Platform identity integration. DevOps/Automation: Experience with CI/CD pipelines, Ansible, Terraform, Docker, or Kubernetes for Ping deployment. Certifications: Ping Identity Certified Professional / Specialist (PingFederate / PingAccess) CISSP or CISM certification For applications and inquiries, contact:hirings@openkyber.com