PING IDENTITY & LDAP ADMINISTRATOR

Job Description

Job Description

Job Role: PING IDENTITY
LDAP ADMINISTRATOR
Location: Miami FL , onsite hybrid 3 days/week
Pay rate- ***/hr
JOB SUMMARY:
The Ping Identity / LDAP Administrator is responsible for the design, implementation, maintenance, and support of the organization s Identity and Access Management (IAM) infrastructure running on Amazon Web Services (AWS).
KEY RESPONSIBILITIES:
1. Architecture
Administration
* Directory Operations: Configure, tune, and maintain LDAP infrastructure (e.g., PingDirectory) hosted on Amazon EC2 or containers, optimizing for replication performance across AWS regions.
* Access Management: Administer PingFederate and PingAccess policies, custom adapters, and federation setups ($SAML*** $OAuth*** $OIDC$) hosted in the Cloud.
* Policy Management: Design and maintain access control policies, authentication schemes, and authorization rules.
* Data Synchronization: Oversee data replication, synchronization, and integrity across multiple directory instances and environments.
* Migration: Lead or support lift-and-shift or refactoring initiatives to migrate legacy LDAP and Ping architectures to AWS.
2. Integration
Support
* SSO Federation: Configure and troubleshoot Single Sign-On (SSO) integrations using protocols such as SAML 2.0, OAuth 2.0, OIDC (OpenID Connect), and WS-Federation.
* Application Onboarding: Partner with internal application teams to integrate custom and third-party SaaS applications into the identity platform.
* API Security: Implement and secure API gateways using Ping Access or similar tools.
* Troubleshooting: Provide technical support for complex identity, authentication, and directory service issues.
3. Security
Compliance
* Cloud Security: Implement AWS security best practices utilizing AWS IAM, Security Groups, VPC ACLs, and AWS Secrets Manager to protect directory data and API keys.
* Audit
Logging: Monitor system logs and audit trails to detect potential security breaches or operational anomalies.
* Certificates: Manage the lifecycle of SSL/TLS and signing certificates used within the IAM infrastructure.
REQUIRED SKILLS
QUALIFICATIONS:
Technical Skills:
* Directory Expertise: Deep understanding of LDAP schemas, object classes, attributes, tree structures, and ACIs (Access Control Instructions).
* IAM Tools: Proven hands-on experience with PingFederate, PingDirectory, and PingAccess.
* Protocols: Strong knowledge of federation protocols (SAML, OAuth, OIDC) and network protocols (TCP/IP, DHCP, DNS).
* Scripting: Proficiency in scripting languages (e.g., Python, PowerShell, Bash, or Shell) for automating administrative tasks.
* Operating Systems: Comfortable navigating and administering both Linux/Unix and Windows Server environments.
Soft Skills
Experience:
* Experience: 3 years of dedicated experience in Identity and Access Management with a focus on LDAP and Ping products on Cloud env.
* Problem-Solving: Strong analytical skills to diagnose complex federation and replication issues across disparate networks.
* Collaboration: Ability to work closely with Cloud Architects, DevOps Engineers, and Security teams to enforce enterprise-wide IAM policies.
PREFERRED QUALIFICATIONS:
* Certifications: Ping Certifications: Ping Identity Certified Professional or Expert.
* Cloud Experience: Experience migrating legacy on-premises LDAP/Ping infrastructures to cloud environments (AWS, Azure, GCP).
* DevOps/CI-CD: Familiarity with containerization (Docker, Kubernetes) and infrastructure as code (Terraform, Ansible) for deploying IAM solutions.
*** is an Equal Employment Opportunity employer. We promote and support a diverse workforce at all levels of the company. All qualified applicants will receive consideration for employment without regard to race, religion, color, sex, age, national origin, or disability. All applicants will be evaluated solely based on their ability, competence, and performance of the essential functions of their positions with or without reasonable accommodations. Reasonable accommodations also are available in the hiring process for applicants with disabilities.
Candidates can request a reasonable accommodation by contacting the company ADA Coordinator at
*** . Greetings,