Ping Engineer

Identity & Access Management Engineer Ping Identity (PingFederate, PingAccess, PingOne DaVinci)

About the Role

We are seeking an experienced Identity & Access Management (IAM) Engineer to design, implement, and support enterprise identity solutions built on the Ping Identity platform. The ideal candidate has hands-on expertise with PingFederate, PingAccess, and PingOne DaVinci, and can architect secure, scalable authentication and authorization workflows across cloud and on-premises environments.

Key Responsibilities

• Configure, deploy, and maintain PingFederate for SSO, federation (SAML 2.0, OAuth 2.0, OIDC), and identity bridging across internal and external applications.
• Implement and manage PingAccess policies for web access management, reverse proxy configurations, and API/application protection.
• Build and optimize authentication journeys, orchestration flows, and adaptive/risk-based policies using PingOne DaVinci.
• Integrate Ping solutions with directory services (Active Directory, LDAP), IdPs/SPs, MFA providers, and downstream applications.
• Develop and maintain custom adapters, connectors, and policy contracts within the Ping ecosystem.
• Troubleshoot authentication, federation, and authorization issues across PingFederate, PingAccess, and DaVinci flows.
• Collaborate with security, application, and infrastructure teams to define IAM requirements and ensure compliance with security standards (NIST, Zero Trust, etc.).
• Create and maintain technical documentation, runbooks, and architecture diagrams.

Required Qualifications

• 3+ years of hands-on experience with PingFederate (federation, SSO, token management, adapters).
• 2+ years of experience with PingAccess (policy configuration, reverse proxy, API protection).
• Practical experience building flows in PingOne DaVinci (orchestration, connectors, no-code/low-code authentication journeys).
• Strong understanding of identity protocols: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Fed.
• Experience integrating with directory services (Active Directory, LDAP) and MFA solutions.
• Familiarity with REST APIs and scripting (Python, PowerShell, or Java) for automation and custom integrations.
• Solid understanding of security best practices, Zero Trust principles, and risk-based authentication.
• Strong troubleshooting skills across distributed, multi-tier systems.