Ping Identity IAM Consultant

About the Role

We are looking for a highly skilled Ping Identity IAM Consultant with 5 to 8 years of hands-on experience in enterprise Identity and Access Management. The candidate will be responsible for implementing, configuring, integrating, and supporting IAM solutions leveraging the Ping Identity platform to deliver secure and scalable identity services.

Responsibilities

• Deploy, configure, maintain, and support enterprise IAM systems using Ping Identity solutions.
• Manage PingFederate configurations to enable enterprise federation, Single Sign-On (SSO), and application integration.
• Operate PingAccess to secure applications and APIs by defining and enforcing access policies.
• Implement Multi-Factor Authentication (MFA) using PingID or PingOne to enhance user authentication security.
• Integrate enterprise systems using industry standards such as SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Connect Ping Identity products with LDAP, Active Directory, APIs, and other identity sources for seamless integration.
• Oversee identity lifecycle management including new user onboarding, role changes, access rights provisioning, and de-provisioning.
• Ensure appropriate access controls using RBAC, least-privilege access principles, and compliance with organizational security policies.
• Resolve complex issues involving SSO, authentication flows, authorization, federation, tokens, certificates, and application integration.
• Monitor IAM infrastructure and collaborate with security, application, infrastructure, and DevOps teams to uphold a secure and robust IAM environment.

Qualifications and Skills

• Minimum 5 years and up to 8 years of experience in enterprise Identity and Access Management roles.
• Extensive practical exposure to Ping Identity platform products and their deployment.
• Proficient in PingFederate for federation and SSO implementations.
• Experienced in using PingAccess to safeguard applications and APIs with proper access controls.
• Familiar with PingID or PingOne MFA solutions for enhanced authentication security.
• Strong knowledge and hands-on experience with SAML 2.0, OAuth 2.0, and OpenID Connect protocols.
• Hands-on expertise integrating IAM solutions with LDAP and Active Directory directories.
• Understanding of RBAC, least-privilege access, and identity lifecycle management.
• Ability to troubleshoot complex federations, token exchanges, and authentication issues.

Additional Desirable Skills

• Experience with PingDirectory as an enterprise directory service.
• Exposure to PingOne DaVinci for identity orchestration and workflow automation.
• Implementations of passwordless and adaptive authentication techniques.
• Understanding of attribute-based access control (ABAC) and advanced authorization mechanisms.
• Knowledge of API security frameworks and the protection of APIs via identity standards.
• Familiarity with Zero Trust Architecture concepts applied to IAM.
• Integration experience with cloud environments like Azure, AWS, or Google Cloud Platform.
• Basic skills in scripting, DevOps practices, CI/CD pipelines, and IAM automation.
• Relevant certifications in Ping Identity, IAM, cloud security, or related fields are advantageous.

Education

A bachelor's degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a closely related discipline is required.