Ping Identity Engineer

AIRITOS, LLC

United States

about 2 months ago

Role details

Contract type

Temporary to permanent

Employment type

Full-time (> 32 hours)

Experience level

Experienced

Experience required

3 years minimum

Working hours

Regular working hours

Job source

indeed.com

Tech stack

Active Directory Bash Shell Identity and Access Management Python (Programming Language) Lightweight Directory Access Protocols (LDAP) OAuth OpenID PCI Data Security Standards Ping (Networking Utility) Windows PowerShell Azure Active Directory Security Assertion Markup Language (SAML)

+7 more

User Provisioning Software Scripting Enterprise Software Applications Cyberark Pingfederate SailPoint Servicenow

Job description

We are looking for an experienced IAM Ping Identity Engineer to join a large financial services organization on a contract basis. You will work within a mature, compliance-driven environment to support the design, implementation, and ongoing operations of the organization’s identity and access management infrastructure. This role is well-suited for someone who has hands-on Ping product experience and is comfortable operating under the governance and change management standards typical of regulated industries., * Design, configure, and maintain Ping Identity solutions including PingFederate, PingAccess, and PingDirectory

Administer and troubleshoot SSO, federation, and authentication integrations across enterprise applications
Support OAuth 2.0, OIDC, and SAML-based integrations with internal and external service providers
Participate in the full IAM lifecycle including onboarding, access provisioning, and deprovisioning workflows
Collaborate with application teams, security architects, and infrastructure teams to integrate applications with the Ping ecosystem
Maintain documentation for configurations, runbooks, and change requests in alignment with change management policies
Assist with audits, compliance reviews, and evidence gathering for regulatory requirements (SOX, PCI-DSS, or similar)
Identify and remediate security vulnerabilities or misconfigurations within the IAM environment
Support incident triage and resolution for authentication and access-related issues

Requirements

Do you have experience in Ping Identity?, * 4-7 years of experience in Identity and Access Management

3+ years of hands-on experience with Ping Identity products (PingFederate required; PingAccess and PingDirectory a strong plus)
Solid understanding of federation protocols: SAML 2.0, OAuth 2.0, and OIDC
Experience working in regulated environments such as financial services, healthcare, or government
Familiarity with LDAP/Active Directory and directory services integration
Working knowledge of MFA solutions and adaptive authentication policies
Experience with change management processes and operating within ITSM frameworks (ServiceNow or equivalent)
Ability to work independently and manage deliverables with limited day-to-day supervision, * Ping Identity certifications (PingFederate Engineer, etc.)
Experience with CyberArk, SailPoint, or other PAM/IGA platforms
Exposure to cloud IAM patterns (AWS IAM, Azure AD/Entra ID)
Scripting or automation experience (Python, PowerShell, or Bash) for IAM workflows
Familiarity with SOX, PCI-DSS, or FFIEC compliance frameworks, * Must be based in the United States and authorized to work without sponsorship
Must be able to pass a background check, including financial background screening
Corp-to-Corp (C2C) or W2 engagements considered; no third-party C2C without prior approval