Lead the installation, fine-tuning, and maintenance of the PingIdentity suite, including PingFederate, PingDirectory, and PingAccess
Personally develop the technical connectors and workflows between authentication layers and our IGA and PAM/PIM platforms
Build and manage identity infrastructure using Terraform or Ansible, ensuring all configurations are automated and version-controlled
Engineer scalable customer identity journeys that resolve complex federated access requirements while maintaining a seamless user experience
Define the technical standards for the identity team by producing high-quality code, rigorous documentation, and robust architectural patterns
Act as the primary escalation point for the most complex technical failures, performing deep-dive analysis of protocol exchanges (SAML, OIDC, OAuth2)
Provide structured technical guidance to junior and mid-level engineers, upskilling the team through peer reviews and collaborative problem-solving
Excellent collaboration and communication skills. Ability to influence stakeholders across multiple teams and levels.

Solid hands-on engineering experience in IAM
Extensive hands-on experience deploying and managing PingFederate (SAML/OAuth/OIDC configurations), PingDirectory, and PingAccess (WAM/API security)
A proven track record of executing the migration of legacy identity systems to modern, claims-based architectures
Direct experience configuring and integrating IGA tools (e.g. SailPoint, Saviynt) and PAM/PIM solutions to enforce the principle of least privilege
Expert-level capability in debugging and configuring SAML , OIDC , OAuth2 , and SCIM workflows
Strong understanding of RBAC, ABAC, Zero Trust architecture, and Directory Services (LDAP, Active Directory, Azure AD/Entra ID)
Proven experience implementing or managing PAM solutions (e.g., vaulting, session recording, password rotation) and PIM principles (role elevation, time-bound access)
Proficiency in scripting (Python, PowerShell, Bash) and Infrastructure as Code (Terraform, Ansible) to automate IAM deployments
Ability to analyze HTTP headers, trace logs (Fiddler, Wireshark), and identity telemetry to resolve complex authentication flow issues

Senior Identity Management Engineer

Key skills