Ping Identity Consultant

Position summary

IAM solution delivery

• Design, implement, and maintain Ping Identity solutions across enterprise and hybrid environments.
• Deliver end-to-end IAM projects covering SSO, MFA, federation, and API security.
• Configure, customize, troubleshoot, patch, and upgrade Ping Identity platforms.
• Design authentication flows, access policies, user journeys, and authorization frameworks.
• Implement RBAC, ABAC, risk-based access controls, and Zero Trust security models.

Integration and operations

• Develop custom integrations, extensions, and automation using Java, Python, Groovy, and shell scripting.
• Configure identity repositories, directory services, and synchronization mechanisms.
• Integrate Ping Identity with enterprise applications, cloud services, APIs, and third-party platforms.
• Perform performance tuning, monitoring, capacity planning, disaster recovery planning, and production support.
• Support security governance, compliance, audit requirements, and access certification.

Documentation and leadership

• Create architecture documents, operational runbooks, deployment guides, and technical documentation.
• Lead technical workstreams, mentor junior team members, and collaborate with business and technology stakeholders.

Required experience and technical skills

• 7–10+ years of IAM experience, including at least 4–6 years of hands-on Ping Identity experience.
• Strong expertise in PingFederate, PingAccess, PingOne, and related Ping Identity products.
• Experience delivering SSO, MFA, federation, and API security solutions.
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect, JWT, authentication policies, authorization models, RBAC, and ABAC.
• Experience integrating enterprise applications and developing custom IAM integrations and automation with Java and scripting languages.
• Understanding of identity repositories, directory services, user lifecycle management, and authentication workflows.
• Experience implementing Zero Trust and risk-based access controls and supporting high-availability production environments.
• Experience with Git, CI/CD, automation, troubleshooting, and performance optimization.
• Strong communication, documentation, stakeholder-management, and leadership skills.

Preferred experience and qualifications

• Experience in banking, financial services, government, telecom, or other regulated industries is advantageous.
• PingDirectory, PingAuthorize, PingDataGovernance, IGA, cloud platforms, Docker, Kubernetes, OpenShift, SIEM, or PAM experience is beneficial.
• Experience securing microservices, APIs, and cloud-native applications, or exposure to DevSecOps and Infrastructure-as-Code, is advantageous.
• Ping Identity, CISSP, CISM, Azure Security, AWS Security, or equivalent certifications are advantageous.