Senior CIAM Architect

Senior CIAM Architect (15+ Years) We are seeking a highly experienced Senior CIAM Architect with deep expertise in Ping Identity technologies to lead the design, engineering, integration, and support of enterprise-scale customer identity and access management platforms. This role requires strong hands-on experience across federation, authentication, directory services, security, PKI, infrastructure, and automation, with the ability to drive architecture decisions and resolve complex production issues in high-scale environments. Mandatory Experience 15+ years in IAM/CIAM domain 8+ years working with Ping Identity products Strong hands-on experience with: PingFederate PingDirectory PingAccess PingOne Experience supporting enterprise-scale customer authentication platforms (10M+ users preferred). Banking customer would be an added advantage. Key Responsibilities Lead the architecture, design, implementation, and support of enterprise CIAM solutions using Ping Identity products. Own end-to-end solution design for customer authentication, federation, authorization, and directory integration use cases. Design scalable and secure authentication platforms capable of supporting large user populations and high transaction volumes. Implement and optimize SSO, MFA, OAuth, OIDC, and federation flows for enterprise and customer-facing applications. Drive integration with downstream applications, identity providers, APIs, directories, and security infrastructure. Lead production issue resolution for complex authentication, federation, token, certificate, and directory-related problems. Collaborate with infrastructure, network, security, application, and DevOps teams to ensure resilient and secure identity services. Define engineering standards, deployment patterns, operational runbooks, and best practices for CIAM platform support. Provide technical leadership to engineering teams, review solution designs, and mentor junior team members. Support modernization initiatives including cloud adoption, automation, and observability for identity platforms. Technical Skills Federation & Authentication SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) JWT/JWS/JWE PingFederate Expertise End-to-end PingFederate administration SSO Integration Token exchange Authentication Policies Selectors and Adapters OAuth/OIDC troubleshooting Federation onboarding Cloud Skills Amazon Web Services (AWS) Infrastructure Linux administration Networking fundamentals DNS Load balancers Reverse proxies Firewall concepts Security & PKI Expertise (Very Important) SSL/TLS certificate installation Certificate renewal process #J-18808-Ljbffr