Staff IAM Engineer – Ping Identity, Directory Services

This is a fully remote position, open to applicants in Texas.

📋 Description

• Manage and provide support for Ping Identity platforms such as PingFederate, PingAccess, Ping Directory, PingOne MFA, Ping DaVinci, and Risk-Based Authentication.

• Set up, troubleshoot, and assist with Single Sign-On (SSO), Multi-Factor Authentication (MFA), Passwordless Authentication, and Passkey solutions.

• Resolve authentication and authorization challenges involving SAML, OAuth, OpenID Connect (OIDC), LDAP, and related technologies.

• Install, manage, and maintain LDAP directory services, including RadiantOne FID/VDS, Ping Directory, ODSEE, and IBM Tivoli Directory Server.

• Assist with LDAP application integrations, migrations, service account configurations, ACIs, and directory consolidation projects.

• Participate in a 24x7 on-call support rotation for IAM, SSO, MFA, and LDAP services.

• Conduct proactive monitoring, log analysis, incident resolution, root cause analysis, vulnerability remediation, and performance tuning of platforms.

• Aid in disaster recovery exercises, platform upgrades, patching activities, and operational readiness testing.

• Collaborate with infrastructure, network, security, and application teams to troubleshoot load balancers, DNS, SSL/TLS, proxy, and connectivity issues.

• Use PowerShell, Python, Shell, and APIs to optimize operational processes and minimize manual efforts.

• Harness AI and emerging technologies to enhance automation, self-service capabilities, operational efficiency, and user experience.

• Maintain technical documentation, runbooks, and knowledge articles.

• Continuously refine operational processes and broaden expertise in authentication, directory, cloud, and security domains.

⛳️ Requirements

• Over 7 years of experience in Identity and Access Management (IAM).

• More than 5 years of experience with Ping Identity products, LDAP technologies, and authentication platforms.

• At least 3 years of experience with Radiant Logic (VDS/ICS), Ping Directory, or other enterprise LDAP solutions.

• A minimum of 3 years of experience with both Linux and Windows platforms.

• At least 3 years of experience with PowerShell, Python, Shell, or API-based automation.

• Strong troubleshooting capabilities in authentication, federation, networking, and directory services.

• Comprehensive knowledge of SAML, OAuth 2.0, OpenID Connect (OIDC), LDAP, MFA, Passkeys, and FIDO2/WebAuthn.

• Experience with Azure AD / Microsoft Entra ID, Okta, or other IAM platforms.

• Familiarity with monitoring tools such as Splunk, AppDynamics, Dynatrace, or similar applications.

• Experience with AI-assisted automation, self-service platforms, and workflow orchestration.

• Bachelor's degree from an accredited college or university, or an equivalent combination of education and relevant work experience.

• High School Diploma/GED with 4 years of related experience as an alternative educational pathway.

🏝️ Benefits

• Medical coverage.

• Dental coverage.

• Vision coverage.

• Paid time off.

• Retirement savings options.

• Wellness programs.

• Additional resources supporting physical, emotional, and financial well-being.

• CVS Health bonus, commission, or short-term incentive program.

• Equity award program.