Ping Identity IAM Consultant

Job summary

Key responsibilities

• Implement, configure, administer, and support enterprise IAM solutions using the Ping Identity platform.
• Configure PingFederate for federation, SSO, and application integrations; configure PingAccess to secure applications and APIs through access policies.
• Implement PingID/PingOne for MFA and secure authentication; integrate applications using SAML 2.0, OAuth 2.0, and OpenID Connect.
• Integrate with LDAP, Active Directory, enterprise applications, APIs, and other identity sources.
• Manage onboarding, role changes, access provisioning, and de-provisioning; apply RBAC, least privilege, and organizational security policies.
• Troubleshoot SSO, authentication, authorization, federation, token, certificate, and application integration issues.
• Monitor IAM services and authentication activity; collaborate with security, application, infrastructure, and DevOps teams.

Core qualifications

• 5–8 years of hands-on enterprise IAM experience and strong hands-on Ping Identity platform experience.
• Experience administering PingFederate and PingAccess, and practical experience with PingID and/or PingOne.
• Hands-on SSO and federation implementation with SAML 2.0; working knowledge of OAuth 2.0 and OpenID Connect.
• Experience implementing and troubleshooting MFA and enterprise authentication flows.
• Experience integrating with LDAP and Active Directory; understanding of RBAC, least privilege, and identity lifecycle management.
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related discipline.

Preferred skills

• Good-to-have experience includes PingDirectory, PingOne DaVinci, passwordless authentication, adaptive or risk-based authentication, and ABAC.
• Additional advantageous knowledge includes API security, Zero Trust, Azure, AWS, GCP, DevOps, CI/CD, scripting, and IAM automation.
• Relevant Ping Identity, IAM, cloud, or security certifications are an advantage.