> Markdown version of [/jobs/ext/3750986-iam-architect](https://www.wearedevelopers.com/jobs/ext/3750986-iam-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # IAM Architect - **Company:** OpenKyber LLC - **Location:** Atlanta, GA, United States - **Experience:** Expert - **Contract:** Permanent contract - **Skills:** Java (Programming Language), Active Directory, Amazon Web Services, Proxy Servers, Apache HTTP Server, Software System Penetration Testing, Microsoft Azure, Bash Shell, Cloud Computing, Continuous Integration, Data Stores, DevOps, Multi-Factor Authentication, Middleware, Web Servers, Identity and Access Management, Internet Information Services (IIS), Python (Programming Language), Network Security, Lightweight Directory Access Protocols (LDAP), Nginx, OAuth, OpenID, Ping (Networking Utility), Windows PowerShell, Role-Based Access Control, Ansible, Zero Trust Network Access, Security Assertion Markup Language (SAML), Single Sign-On, Scripting, Google Cloud, Load Balancing, Firewalls (Computer Science), Pingfederate, Kubernetes, Restful APIs, Terraform, Docker - **Published:** October 15, 2026 - **Apply:** https://www.careerjet.com/jobad/usba2b588f3be07ab4808168ea84a2f30c ## About the Role Experience: 10+ Years Visa: EAD, TN, L2, E2, (No H1B & OPT) Job Description: We are seeking an experienced Senior IAM PingFederate Engineer to design, deploy, configure, and maintain enterprise Identity and Access Management (IAM) solutions with a heavy focus on Ping Identity products (PingFederate, PingAccess, PingOne, PingDirectory) . The ideal candidate will serve as a Subject Matter Expert (SME) in single sign-on (SSO), federation, multi-factor authentication (MFA), and identity federation across cloud and on-premises environments. Key Responsibilities Architect, configure, and maintain enterprise PingFederate instances across multi-region environments. Manage PingDirectory / PingAccess policy rules, engine configurations, and identity data stores. Enforce Zero-Trust architecture, Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC). Support security incident response, audits, penetration testing remediation, and compliance reporting (SOC2, ISO 27001, GDPR). Required Qualifications & Skills Experience: 10+ years in enterprise Identity & Access Management (IAM) with at least 4 5+ years of hands-on experience dedicated to PingFederate . Federation Protocols: Expert knowledge of SAML 2.0, OAuth 2.0, OIDC, WS-Trust/WS-Fed, and SCIM provisioning. Ping Product Suite: Strong proficiency in PingFederate , PingDirectory , PingAccess , and PingOne/PingID . Directory Services: Deep experience with LDAP directories (PingDirectory, Active Directory, UnboundID). Development/Scripting: Proficiency in Java (for custom adapters), Python , PowerShell , or Bash . Web & Middleware: Hands-on experience with web servers (Apache, Nginx, IIS) and RESTful API authentication models. Networking Security: Understanding of SSL/TLS certificates, reverse proxies, firewalls, and load balancing (F5/AWS ALB). Cloud Infrastructure: Hands-on experience with AWS, Azure, or Google Cloud Platform identity integration. DevOps/Automation: Experience with CI/CD pipelines, Ansible, Terraform, Docker, or Kubernetes for Ping deployment. Certifications: Ping Identity Certified Professional / Specialist (PingFederate / PingAccess) CISSP or CISM certification For applications and inquiries, contact:hirings@openkyber.com