Senior IAM Engineer

Role : Senior IAM Engineer

Location : Mountain View or San Diego, CA (Hybrid)

About the Role

We are seeking a highly skilled Senior IAM Engineer with deep expertise in Ping Identity solutions and enterprise authentication technologies. The ideal candidate will have hands‑on experience designing, implementing, and supporting large‑scale Identity and Access Management (IAM) environments, with a strong focus on Single Sign‑On (SSO), federation, authentication services, and application onboarding.

This role requires close collaboration with customers, application teams, security stakeholders, and engineering teams to deliver secure, scalable, and reliable IAM solutions across enterprise environments.

Key Responsibilities

• Participate and lead the design and deployment of Ping Identity solutions across multiple environments.
• Implement PingFederate and PingAccess in clustered and high‑availability configurations.
• Configure SSO using various authentication schemes (form‑based, certificate‑based, etc.).
• SSO Onboarding and Certificate Renewal: Work with customers to help them onboard their applications to SSO (single sign‑on).
• Includes:
  • Consultation: Work with the customer and application vendor to analyze and determine if the application supports industry standard authentication mechanisms such as SAML. Determine the appropriate solution path and elevate non‑standard integrations.
  • Submit proper request document: Follow on with customer to submit the onboarding request for SSO and implement.
  • Troubleshoot and QA: work at the detailed technical level to resolve issues
• Implement changes to existing SSO integrations: Work with customers to analyze and update existing SSO integrations as the customer applications evolve or are upgraded. This could involve after hours work to minimize end‑customer impact for production integrations.
• Define and enforce PingFederate policies and configurations for SP and IdP roles.
• Integrate Ping products with SAML, WS‑Federation, OAuth, OpenID Connect, and WS‑Trust protocols.
• Migrate data and policies from legacy IAM systems to Ping Identity platforms.
• Perform performance tuning for high‑volume transaction environments.
• Integrate IAM systems with Windows and Unix/Linux platforms.
• Collaborate with cross‑functional teams to ensure seamless IAM integration.
• Work with other IAM technologies such as CA SiteMinder.
• Manage the consolidation of applications/services between services, including data migration from applications.
• Oversee the decommissioning of applications/services replaced by client specific solutions.
• Establish and execute validation principles to ensure successful migrations.
• Provide daily updates to the core team on progress, roadblocks and items on roadmap.
• Create JIRA stories for consultation for candidate application - Publish weekly summary of progress.

Technical Skills:

• Candidate MUST be able to work well with internal and external customers to gather requirements, help them understand what we’ll need in order to onboard, and work with Product Management and Scrum Master on status updates and creation of user stories in Jira backlog.
• Work with customers to resolve service requests and support tickets.
• Assist with test, rollout and support of new Authentication features.
• Strongly desired: experience in Ping Access Manager, PingFederate, LDAP, and Unix.
• DevOps / GitOps
  • AWS compute, storage, networking, scaling, HA, performance, cost optimization
  • Scripting and automation -- such as CI/CD, Python, CloudWatch, Bash, Splunk, Jenkins, GIT
  • Containerization -- Kubernetes, docker
  • Monitoring, alerting, health checks.
• Support
• Comprehensive understanding of Identity and Access Management (IAM) principles and best practices.
• Deep proficiency in Ping’s Identity Engine platform (features, functionality, integration). PingFederate, PingAccess, PingDirectory, PingOne, PingID
• Strong expertise in IDP protocols: SSO, SAML, OIDC, JIT, OAuth, SCIM (understanding appropriate use cases).
• Ability to interpret technical specifications and communicate effectively with technical and non‑technical audiences.
• Development -- Python, Java, back end or full stack, database, Spring Boot.
• Okta Knowledge is nice to have.

Qualifications

Bachelor’s/Master’s degree in Computer Science, IT, or related field

8 years of hands‑on experience in IAM, Ping Identity products

Relevant certifications in Ping Identity products

AWS Certification preferred

Agile/Scrum exposure

Strong analytical and investigative mindset

Strong attention to detail in requirements gathering and solution validation.

Ability to convert technical findings into executive‑friendly insights

Excellent communication skills --- interpersonal, oral, written, and documentation --- with strong customer‑facing presence for stakeholder presentations and discussions

Additional Attributes

Strong organizational skills, including the ability to adapt to shifting priorities and meet frequent deadlines

Highly resourceful, collaborative team player with a process‑driven approach to security delivery --- able to work independently with initiative and a sense of urgency

Exemplifies a customer‑focused, action‑oriented, results‑driven culture

Proactive, forward‑looking problem‑solver with strong judgment and decision‑making capability, a desire for continuous learning, and the initiative to propose solutions

Ability to act with discretion and maintain complete confidentiality

Dedicated to our client’s values of non‑negotiable integrity, valuing our people, exceeding client expectations, and embracing intellectual curiosity and rigor