Ping Engineer

This is a fully remote position, open to applicants in India.

📋 Description

• Serve as a subject matter expert for PingFederate, PingID MFA, and Ping Directory.

• Oversee intricate application integrations and legacy system migrations.

• Provide technical leadership during significant incidents.

• Manage daily technical operations for PingFederate, PingID MFA, and Ping Directory.

• Design and uphold SAML, OAuth, and OIDC integrations for enterprise single sign-on (SSO).

• Assist with application onboarding and maintain service provider/identity provider connections, adapters, authentication policies, and contract mappings.

• Handle signing/encryption certificate rotations and updates to the trust store.

• Validate user attributes and claim mappings.

• Resolve critical and high-severity SSO and authentication issues.

• Analyze JVM behavior, thread dumps, heap dumps, logs, audit logs, metrics, and performance bottlenecks.

• Collaborate with Ping Identity on product defects and complex issues.

• Support high-availability and disaster-recovery environments, clusters, and load balancers.

• Implement approved configuration changes, upgrades, patching, hotfixes, and emergency patches.

• Develop authentication policies, selectors, custom adapters, and adapter instances.

• Create advanced OAuth flows, token exchanges, fine-grained scopes, and JWT customizations.

• Promote continuous quality and process enhancements, automating routine operations.

• Mentor junior team members and convey security concepts and improvement plans.

• Assist in security requirements analysis, compliance assessments, access reviews, and audit evidence gathering.

• Troubleshoot production issues, engage in change management and release planning, and conduct root-cause analyses.

• Recommend permanent solutions and preventive strategies.

• Draft and revise knowledge-base articles, architecture diagrams, integration guides, standard operating procedures (SOPs), and runbooks.

• Establish monitoring and alerting standards.

• Collaborate with application, network, infrastructure, security, compliance, and vendor teams.

• Ensure adherence to vendor service level agreements (SLA) and operational level agreements (OLA).

⛳️ Requirements

• 8–12+ years of experience in Identity and Access Management (IAM).

• At least 5 years of knowledge and practical experience with implementing PingFederate, Ping MFA, Ping Directory, and related components.

• Exceptional technical thought leadership and hands-on implementation capabilities with PingFederate and Ping MFA.

• Preferred knowledge and hands-on experience with Active Directory and/or Azure AD/Microsoft Entra ID.

• Strong comprehension of SSO, MFA, and directory services such as Active Directory and LDAP.

• Understanding of certificate lifecycle management, SSL/TLS, and certificate handling.

• Expertise in SAML, OAuth, OpenID Connect, and SCIM.

• Proficiency in scripting/programming languages such as PowerShell, Java, or C#.

• Familiarity with cloud IAM solutions, including Azure AD, AWS IAM, or Google Cloud Platform.

• Experience with waterfall, Agile, DevSecOps, and ITIL methodologies.

• Excellent written and verbal communication, presentation, and facilitation skills.

• Strong interpersonal, organizational, analytical, problem-solving, and stakeholder management abilities.

• Capability to thrive in fast-paced, shifting-priority environments while managing multiple projects.

• ISC2 certifications such as CISSP or CCSP, Ping Certifications, ITIL 4 Foundations Certification, or other IDAM product certifications are advantageous.

🏝️ Benefits

• No relocation support is available.

• Equal opportunity employment.