We are looking for a seasoned Ping Identity Architect with deep expertise in identity and access management (IAM) to design, implement, and support secure authentication and authorization frameworks. The ideal candidate will bring hands-on experience in the Ping Identity suite and a strong understanding of enterprise IAM architecture, integration, and governance.
Key Responsibilities:
- Lead end-to-end architecture and implementation of Ping Identity solutions including PingFederate, PingAccess, PingDirectory, and PingID.
- Architect and implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), OAuth 2.0, OIDC, SAML, and SCIM integrations.
- Collaborate with enterprise security, infrastructure, and application teams to ensure robust and scalable IAM solutions.
- Define and document IAM architecture patterns, technical standards, and best practices.
- Perform detailed design and code reviews of IAM integrations and flows.
- Conduct proof of concepts (PoCs) and lead solution evaluations with cross-functional teams.
- Analyze existing IAM environments and provide modernization strategies, optimization, and migration plans.
- Support identity governance processes including user lifecycle, role-based access control (RBAC), and compliance.
- Troubleshoot and resolve complex identity-related issues across systems and applications.
Skills & Experience:
- 8+ years of experience in the IAM space with 2+ years hands-on expertise in the Ping Identity suite.
- Deep understanding of authentication protocols (SAML, OAuth, OIDC, WS-Fed) and standards-based identity frameworks.
- Experience integrating Ping Identity with cloud (AWS/Azure/GCP) and on-premise applications.
- Proficient in Java, Groovy, or scripting languages for customizing Ping flows.
- Solid knowledge of directory services (LDAP/Active Directory).
- Experience with DevOps/CI-CD pipelines, Docker, and Kubernetes for Ping deployments is a plus.
- Familiarity with identity lifecycle management, compliance requirements, and audit controls.
Preferred Certifications:
- Ping Identity certifications
- Certified Expert or Professional – PingFederate
- Certified Expert or Professional – PingOne
- Certified Professional – PingOne DaVinci
- CISSP, Azure AD, AWS IAM certifications (nice to have)
Apply for this position
Equal Opportunity Provider
SecurDI is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, sexual orientation or gender identity, or any other characteristic protected by law.