Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : Identity and Access Management (IAM) Operations

Good to have skills : NA
Minimum 3 year(s) of experience is required

Educational Qualification : 15 years full time education

Summary:
Experience in IAM/Access Management, with 2+ years of hands-on experience in Ping Identity suite.
The Ping Access Management Consultant is responsible for designing, implementing, and supporting enterprise-grade authentication, authorization, and federation solutions using the Ping Identity suite (PingFederate, PingAccess, PingOne, PingID). The consultant will work with security, infrastructure, and application teams to deliver secure access controls, SSO integrations, MFA deployments, and modern identity protocols across the organization.


Roles & Responsibilities:

Access Management Solution Design

Design, configure, and deploy access management solutions using PingFederate, PingAccess, PingID, PingOne.

Implement adaptive authentication, MFA workflows, and identity federation for internal and external applications.

Configure SSO integrations using SAML 2.0, OAuth 2.0, OpenID Connect, WS-Fed.

Define authentication/authorization policies, application access rules, and session management settings.

Ping Platform Implementation & Customization

Set up and maintain PingFederate identity provider (IdP) and service provider (SP) configurations.

Configure PingAccess for policy enforcement, reverse proxying, and fine-grained access control.

Implement PingID MFA integration with various enterprise applications.

Customize Ping flows using scripts, templates, integration kits, and API connectors.

Application Onboarding & Integration

Work with application teams to onboard apps onto PingAccess/PingFederate.

Analyze application authentication needs and map them to appropriate identity protocols.

Integrate Ping with:

Active Directory / Azure AD

LDAP directories

REST APIs / SCIM provisioning

Cloud applications (AWS, SaaS apps, internal apps)

Security Governance & Best Practices

Ensure secure implementation of access management configurations using industry standards.

Apply Zero Trust principles to access control and API protection.

Review authentication logs, troubleshoot federation issues, and optimize Ping platform health.

Support internal and external audits related to identity and access management.

Operations & Troubleshooting

Provide L3 support for access-related incidents, authentication failures, policy errors, and MFA issues.

Monitor Ping platform performance, availability, and logs.

Work with security teams to respond to access-related threats and anomalies.

Documentation & Continuous Improvement

Maintain detailed documentation for Ping configurations, SSO integrations, and access policies.

Enhance and automate onboarding processes using Ping APIs, PowerShell, or Python.

Stay updated with Ping product roadmap and access management trends.

Professional & Technical Skills:

Strong Knowledge of PingFederate (IdP/SP)

Strong Knowledge of PingAccess

Strong Knowledge of PingID / PingOne MFA

Strong Knowledge of SAML / OIDC / OAuth / JWT

Solid understanding of Authentication & authorization flows

Understanding of Federation & SSO architecture

Identity directories (AD, Azure AD, LDAP)

SSL/TLS, certificates, encryption

Experience integrating applications with Ping for SSO and MFA.

Ping Identity certifications (PingFederate, PingAccess, PingOne).

-API security and reverse-proxy access policies

Cloud identity models (Azure AD, AWS IAM)

DevOps & CI/CD for identity deployments

Scripting knowledge (Python, PowerShell, JavaScript) for automation.

The candidate should have minimum 3 years of experience in Identity and Access Management (IAM) Operations.

This position is based at our Bengaluru office.

A 15 years full time education is required.

Qualification 15 years full time education