Ping Identity Engineer

Job Title: Ping Identity Engineer

Duration- Fulltime Permanent

Location: Chicago , IL (Onsite From Day 1)

Job Description:

Ping Identity Engineer to design, implement, support, and optimize enterprise Identity and Access Management (IAM) solutions using the Ping Identity suite. The ideal candidate will possess strong expertise in SSO, Federation, MFA, API security, and directory services, with experience supporting large-scale enterprise or BFSI environments.



Job Summary:-


We are seeking an experienced Ping Identity Engineer to design, implement, support, and optimize enterprise Identity and Access Management (IAM) solutions using the Ping Identity suite. The ideal candidate will possess strong expertise in SSO, Federation, MFA, API security, and directory services, with experience supporting large-scale enterprise or BFSI environments.



Mandatory Skills

Ping Identity Technologies
• PingFederate
• PingAccess
• Ping Directory
• PingID
• PingOne (good to have)
• PingDataSync (good to have) Authentication & Federation
• SAML 2.0
• OAuth 2.0
• OpenID Connect (OIDC)
• SCIM
• JWT
• FIDO2 Directory Services
• LDAP • Microsoft Active Directory
• Azure AD / Microsoft Entra ID Security
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Adaptive Authentication
• Authorization & Access Policies
• Zero Trust Concepts Platforms
• Linux/Unix • Windows Server
• Apache / NGINX / Web Servers
• REST APIs



Roles & Responsibilities

Key Responsibilities


Engineering & Implementation
• Design and implement enterprise authentication and authorization solutions using PingFederate, PingAccess, and PingDirectory.
• Configure and maintain SSO integrations for SaaS, cloud, and on-premises applications.
• Implement federation between internal and external identity providers.
• Configure OAuth and OIDC-based authentication flows.



Application Onboarding
• Integrate new applications with Ping Identity platforms.
• Configure SAML, OAuth, and OIDC connections.
• Support API security and token-based authentication mechanisms.



Access Management
• Design authentication policies and access control frameworks.
• Implement MFA and adaptive authentication controls.
• Configure role-based access controls aligned with least privilege principles.



Operations & Support
• Troubleshoot authentication, federation, and access-related issues.
• Monitor Ping platform health and performance.
• Perform upgrades, patching, and platform maintenance activities.
• Support production incidents and root cause analysis.



Security & Compliance
• Ensure adherence to security standards and compliance requirements.
• Support audit activities and access reviews.
• Develop and maintain technical documentation, SOPs, and architecture diagrams.



Preferred Qualifications
• Experience in BFSI, Healthcare, or other regulated industries.
• Experience with Okta, Entra ID, ForgeRock, Saviynt, or SailPoint.
• Knowledge of CI/CD pipelines and DevOps practices.
• Experience with Splunk , Dynatrace, or enterprise monitoring tools.
• Understanding of PAM, IGA, and CIAM concepts.



Certifications (Preferred)
• Ping Identity Certified Professional
• PingFederate Administrator Certification
• Security+
• CISSP
• Microsoft Identity & Access Administrator



Nice-to-Have Skills
• Java, Groovy, PowerShell, Python
• Kubernetes and Docker
• API Gateway Security
• Cloud IAM (Azure, AWS, GCP)
• LDAP Directory Performance Tuning BFSI-Specific Expectations
• Strong understanding of regulatory compliance and identity governance.
• Experience implementing secure customer and workforce authentication.
• Ability to support high-availability authentication platforms with minimal downtime.
• Experience handling security audits and access certification requirements.