Ping Identity Consultant

About the Role

We are seeking an expert Ping Identity Consultant based in Saudi Arabia (KSA) to architect, deploy, and support enterprise-level Identity and Access Management (IAM) systems. Candidates working and residing in Saudi Arabia are highly preferred. This full-time, onsite/hybrid role demands deep technical know-how in Ping Identity products and a proven track record in managing the complete lifecycle of IAM initiatives including design, implementation, and operational support.

Primary Responsibilities

• Architect, develop, and sustain Ping Identity solutions in both enterprise and hybrid environments.
• Lead comprehensive IAM projects involving Single Sign-On (SSO), Multi-Factor Authentication (MFA), Federation, and API security.
• Customize, troubleshoot, patch, and upgrade the Ping Identity platforms as required.
• Create detailed authentication flows, access control policies, user journeys, and authorization frameworks.
• Implement Role-Based, Attribute-Based Access Control (RBAC, ABAC), risk-based access controls, and adopt Zero Trust security frameworks.
• Develop custom solutions, extensions, and automation scripts utilizing Java, Python, Groovy, and Shell scripting.
• Manage identity repositories, directory services, and synchronization mechanisms.
• Integrate Ping Identity tools seamlessly with enterprise apps, cloud services, APIs, and third-party systems.
• Conduct performance tuning, monitoring, capacity planning, disaster recovery, and provide production support.
• Support governance, compliance audits, and access certification obligations within security requirements.
• Document architecture, operational procedures, deployment processes, and other technical details.
• Oversee technical teams, mentor junior staff, and engage collaboratively with stakeholders across technology and business domains.

Required Qualifications and Expertise

• 7 to over 10 years of in-depth IAM experience with a minimum of 4 to 6 years working hands-on with Ping Identity solutions.
• Proficiency with PingFederate, PingAccess, PingOne, and associated Ping products.
• Solid experience in deploying SSO, MFA, Federation, and API Security mechanisms.
• Comprehensive knowledge of authentication protocols such as SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and JWT.
• Expertise in authentication policies, RBAC, ABAC, and authorization strategies.
• Strong background integrating enterprise-level applications with Ping Identity platforms.
• Advanced skills in developing custom IAM integrations and automations with Java, Python, Groovy, and Bash scripting.
• Understanding of identity stores, directory services, user lifecycle management, and authentication workflow design.
• Hands-on experience implementing Zero Trust security models and risk-based access controls.
• Competence in managing production environments focused on troubleshooting, performance, and high availability.
• Familiarity with Git, CI/CD pipelines, and automation tools.
• Excellent communication, documentation, stakeholder engagement, and leadership capabilities.

Additional Preferred Skills

• Experience in regulated sectors such as Banking, Finance, Government, or Telecom.
• Hands-on knowledge of PingDirectory, PingAuthorize, or PingDataGovernance.
• Familiarity with Identity Governance and Administration (IGA) solutions.
• Cloud platform experience with Azure, AWS, or Google Cloud.
• Competency in container technologies like Docker, Kubernetes, and OpenShift.
• Integration knowledge with SIEM, PAM, and enterprise security monitoring ecosystems.
• Understanding of compliance, audit, cybersecurity frameworks, and governance.
• Experience securing APIs, microservices, and cloud-native applications.
• Exposure to DevSecOps methodologies and Infrastructure-as-Code tools.
• Relevant certifications such as Ping Identity qualifications, CISSP, CISM, Azure Security, or AWS Security are advantageous.