Identity Management Consultant

About This Position:

We are seeking a highly skilled IAM Ping Engineer with deep expertise in designing and implementing Identity and Access Management (IAM) infrastructure using Ping Identity solutions. The ideal candidate will have extensive experience with PingFederate, PingAccess, PingDirectory, PingOne, and PingID, along with a strong understanding of protocols like SAML, OAuth, OpenID Connect, and LDAP. This role involves leading IAM deployments, integrating authentication systems, and migrating legacy solutions to modern IAM platforms.

Key Responsibilities:

• Participate and lead the design and deployment of Ping Identity solutions across multiple environments.
• Implement PingFederate and PingAccess in clustered and high-availability configurations.
• Configure SSO using various authentication schemes (form-based, certificate-based, etc.).
• SSO Onboarding and Certificate Renewal: Work with customers to help them onboard their applications to SSO (single sign-on).
• Includes:
• Consultation: Work with the customer and application vendor to analyze and determine if the application supports industry standard authentication mechanisms such as SAML. Determine the appropriate solution path and escalate non-standard integrations.
• Submit proper request document: Follow on with customer to submit the onboarding request for SSO and implement.
• Troubleshoot and QA: work at the detailed technical level to resolve issues
• Implement changes to existing SSO integrations: Work with customers to analyze and update existing SSO integrations as the customer applications evolve or are upgraded. This could involve after hours work to minimize end-customer impact for production integrations.
• Define and enforce PingFederate policies and configurations for SP and IdP roles.
• Integrate Ping products with SAML, WS-Federation, OAuth, OpenID Connect, and WS-Trust protocols.
• Migrate data and policies from legacy IAM systems to Ping Identity platforms.
• Perform performance tuning for high-volume transaction environments.
• Integrate IAM systems with Windows and Unix/Linux platforms.
• Collaborate with cross-functional teams to ensure seamless IAM integration.
• Work with other IAM technologies such as CA SiteMinder.
• Manage the consolidation of applications/services between services, including data migration from applications.
• Oversee the decommissioning of applications/services replaced by client specific solutions.
• Establish and execute validation principles to ensure successful migrations.
• Provide daily updates to the core team on progress, roadblocks and items on roadmap.
• Create JIRA stories for consultation for candidate application - Publish weekly summary of progress.

Technical Skills:

• Candidate MUST be able to work well with internal and external customers to gather requirements, help them understand what we'll need in order to onboard, and work with Product Management and Scrum Master on status updates and creation of user stories in Jira backlog.
• Work with customers to resolve service requests and support tickets.
• Assist with test, rollout and support of new Authentication features.
• Strongly desired: experience in Ping Access Manager, PingFederate, LDAP, and Unix.
• DevOps / GitOps
• AWS compute, storage, networking, scaling, HA, performance, cost optimization
• Scripting and automation – such as CI/CD, Python, CloudWatch, Bash, Splunk, Jenkins, GIT
• Containerization – Kubernetes, docker
• Monitoring, alerting, health checks.
• Support
• Comprehensive understanding of Identity and Access Management (IAM) principles and best practices.
• Deep proficiency in Ping's Identity Engine platform (features, functionality, integration). PingFederate, PingAccess, PingDirectory, PingOne, PingID
• Strong expertise in IDP protocols: SSO, SAML, OIDC, JIT, OAuth, SCIM (understanding appropriate use cases).
• Ability to interpret technical specifications and communicate effectively with technical and non-technical audiences.
• Development – Python, Java, back end or full stack, database, Spring Boot.
• Okta Knowledge is nice to have.

Analytical Skills:

• Exceptional problem-solving skills to identify and resolve issues effectively.
• Strong attention to detail in requirements gathering and solution validation.

Communication Skills:

• Excellent interpersonal skills for effective stakeholder interaction across all levels.
• Proven ability to create clear, concise documentation and reports.

Management Skills:

• Strong organizational skills for managing multiple tasks simultaneously.
• Ability to prioritize and meet deadlines in a dynamic environment.
• Knowledgeable with Agile Scrum methodologies

Education & Certifications:

• 8 Years related experience in IAM domain.
• Bachelor’s Degree in Computer Science, Computer Engineering, Information Technology or a closely related field.
• Relevant certifications in Ping Identity products