Ping Identity IAM Consultant

About the Role
We are seeking an experienced Ping Identity IAM Consultant with strong hands-on expertise in implementing, configuring, integrating, and supporting enterprise IAM solutions using the Ping Identity platform. The ideal candidate should have practical experience with PingFederate, PingAccess, PingID/PingOne, modern authentication and federation protocols, and enterprise directory integrations. The role will focus on delivering secure, scalable, and reliable identity and access solutions across enterprise applications and environments.

Key Responsibilities

• Implement, configure, administer, and support enterprise IAM solutions using the Ping Identity platform.
• Configure and manage PingFederate for enterprise federation, Single Sign-On (SSO), and application integrations.
• Configure and support PingAccess to secure enterprise applications and APIs through appropriate access policies.
• Implement and manage PingID/PingOne for Multi-Factor Authentication (MFA) and secure user authentication.
• Integrate enterprise applications using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) standards.
• Integrate Ping Identity solutions with LDAP, Active Directory, enterprise applications, APIs, and other identity sources.
• Manage identity lifecycle processes, including user onboarding, role changes, access provisioning, and de-provisioning.
• Configure and maintain appropriate access controls based on RBAC, least-privilege principles, and organizational security policies.
• Troubleshoot complex SSO, authentication, authorization, federation, token, certificate, and application integration issues.
• Monitor IAM services and authentication activities while collaborating with security, application, infrastructure, and DevOps teams to maintain reliable and secure IAM environments.

Core / Must-Have Skills

• 5–8 years of hands-on experience in Identity & Access Management (IAM) within enterprise environments.
• Strong hands-on experience with the Ping Identity platform for implementing and supporting IAM solutions.
• Proven experience configuring and administering PingFederate for federation, authentication, and Single Sign-On.
• Hands-on experience with PingAccess for securing enterprise applications, APIs, and access policies.
• Practical experience with PingID and/or PingOne for Multi-Factor Authentication and secure authentication.
• Strong knowledge of SSO and federation, with hands-on implementation experience using SAML 2.0.
• Strong working experience with OAuth 2.0 and OpenID Connect (OIDC) for application and API authentication and authorization.
• Experience implementing and troubleshooting MFA and enterprise authentication flows.
• Strong experience integrating IAM solutions with LDAP and Active Directory, including identity attributes and user directory integrations.
• Good understanding of RBAC, least-privilege access, and Identity Lifecycle Management, including provisioning and de-provisioning.

Good-to-Have Skills

• Experience with PingDirectory as an enterprise identity data store and directory service.
• Hands-on exposure to PingOne DaVinci for identity orchestration and workflow automation.
• Experience implementing passwordless authentication and modern authentication approaches.
• Knowledge of adaptive and risk-based authentication using contextual and risk signals.
• Understanding of Attribute-Based Access Control (ABAC) and advanced authorization models.
• Experience with API security and protecting APIs using modern identity and access standards.
• Understanding of Zero Trust Architecture and its application within enterprise IAM environments.
• Experience integrating IAM solutions with cloud platforms such as Azure, AWS, or GCP.
• Exposure to DevOps, CI/CD, scripting, and IAM automation for deployment and operational efficiency.
• Relevant Ping Identity, IAM, cloud, or security certifications would be an advantage.

Education
Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related discipline.