Staff IAM Engineer – Ping Identity, Directory Services

This is a fully remote position, open to applicants in Texas.

📋 Description

• Manage and provide support for Ping Identity platforms, which include PingFederate, PingAccess, Ping Directory, PingOne MFA, Ping DaVinci, and Risk-Based Authentication.

• Set up, troubleshoot, and assist with SSO, MFA, Passwordless Authentication, and Passkey solutions.

• Resolve issues related to authentication and authorization that involve SAML, OAuth, OIDC, LDAP, and other associated technologies.

• Install, manage, and maintain LDAP directory services such as RadiantOne FID/VDS, Ping Directory, ODSEE, and IBM Tivoli Directory Server.

• Assist with LDAP application integrations, migrations, service account configurations, ACIs, and directory consolidation projects.

• Take part in a 24x7 on-call support rotation for IAM, SSO, MFA, and LDAP services.

• Conduct proactive monitoring, log analysis, incident resolution, root cause analysis, vulnerability remediation, and optimization of platform performance.

• Aid in disaster recovery exercises, platform upgrades, patching activities, and operational readiness assessments.

• Work collaboratively with infrastructure, network, security, and application teams to troubleshoot issues related to load balancers, DNS, SSL/TLS, proxy, and connectivity.

• Utilize PowerShell, Python, Shell, and APIs to enhance operational processes and minimize manual tasks.

• Apply AI and emerging technologies to boost automation, self-service capabilities, operational efficiency, and user experience.

• Keep technical documentation, runbooks, and knowledge articles up to date.

• Continuously refine operational processes and broaden expertise in authentication, directory, cloud, and security fields.

⛳️ Requirements

• Over 7 years of experience in Identity and Access Management (IAM).

• More than 5 years of experience with Ping Identity products, LDAP technologies, and authentication platforms.

• At least 3 years of experience with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.

• A minimum of 3 years of experience with both Linux and Windows platforms.

• At least 3 years of experience in PowerShell, Python, Shell, or API-based automation.

• Bachelor’s degree from an accredited college or university, or an equivalent combination of education and relevant work experience.

• High School Diploma/GED along with 4 years of related experience as an alternative educational path.

• Strong problem-solving skills in authentication, federation, networking, and directory services.

• In-depth knowledge of SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, MFA, Passkeys, and FIDO2/WebAuthn.

• Experience with Azure AD / Microsoft Entra ID, Okta, or other IAM platforms.

• Familiarity with monitoring tools such as Splunk, AppDynamics, Dynatrace, or similar.

• Experience with AI-driven automation, self-service platforms, and workflow orchestration.

🏝️ Benefits

• Medical coverage.

• Dental coverage.

• Vision coverage.

• Paid time off.

• Retirement savings options.

• Wellness programs.

• Additional resources supporting physical, emotional, and financial well-being.

• CVS Health bonus, commission, or short-term incentive program.

• Equity award program.