Senior IAM Engineer – Ping Identity, Directory Services

This is a fully remote position, open to applicants in Texas.

📋 Description

• Manage and provide support for Ping Identity platforms, including PingFederate, PingAccess, Ping Directory, PingOne MFA, Ping DaVinci, and Risk-Based Authentication.

• Configure, troubleshoot, and support Single Sign-On (SSO), Multi-Factor Authentication (MFA), Passwordless Authentication, and Passkey solutions.

• Resolve authentication and authorization issues related to SAML, OAuth, OIDC, LDAP, and associated technologies.

• Install, manage, and maintain LDAP directory services such as RadiantOne FID/VDS, Ping Directory, ODSEE, and IBM Tivoli Directory Server.

• Assist with LDAP application integrations, migrations, service account configurations, Access Control Instructions (ACIs), and directory consolidation efforts.

• Take part in a 24x7 on-call support rotation for Identity and Access Management (IAM), SSO, MFA, and LDAP services.

• Conduct proactive monitoring, log analysis, incident resolution, root cause analysis, vulnerability remediation, and platform performance optimization.

• Support disaster recovery drills, platform upgrades, patching tasks, and operational readiness assessments.

• Collaborate with infrastructure, network, security, and application teams to troubleshoot issues related to load balancers, DNS, SSL/TLS, proxies, and connectivity.

• Utilize PowerShell, Python, Shell, and APIs to automate operational tasks and minimize manual intervention.

• Harness AI and emerging technologies to enhance automation, self-service features, operational efficiency, and user experience.

• Maintain technical documentation, runbooks, and knowledge articles while enhancing operational processes.

• Keep abreast of IAM technologies and broaden expertise in authentication, directory, cloud, and security domains.

⛳️ Requirements

• Over 7 years of experience in Identity and Access Management (IAM).

• More than 5 years of experience with Ping Identity products, LDAP technologies, and authentication platforms.

• At least 3 years of experience with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.

• Minimum of 3 years of experience with both Linux and Windows platforms.

• At least 3 years of experience with PowerShell, Python, Shell, or API-based automation.

• Strong problem-solving skills in authentication, federation, networking, and directory services.

• In-depth knowledge of SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, MFA, Passkeys, and FIDO2/WebAuthn.

• Familiarity with Azure AD / Microsoft Entra ID, Okta, or other IAM platforms.

• Experience with monitoring tools such as Splunk, AppDynamics, Dynatrace, or similar.

• Knowledge of AI-assisted automation, self-service platforms, and workflow orchestration.

• Bachelor's degree from an accredited college or university, or a combination of education and relevant work experience.

• High School Diploma/GED with 4 years of related experience as an alternative educational pathway.

🏝️ Benefits

• Medical coverage.

• Dental coverage.

• Vision coverage.

• Paid time off.

• Retirement savings options.

• Wellness programs.

• Additional resources supporting physical, emotional, and financial well-being.

• CVS Health bonus, commission, or short-term incentive program.

• Equity award program.