CIAM Architect
Job Summary We are seeking an experienced Ping Identity / IAM Engineer with strong hands-on expertise in Ping Advanced Identity Cloud (AIC) and PingOne Cloud SSO, along with foundational knowledge of Ping Directory. The ideal candidate will design, implement, configure, and support secure Identity and Access Management (IAM) solutions, including authentication, SSO, user lifecycle, identity federation, and directory integrations. Required Skills Ping Advanced Identity Cloud (AIC) – Advanced PingOne / PingOne Cloud SSO – Advanced Ping Directory – Foundation Strong understanding of Identity and Access Management (IAM) Experience with Single Sign-On (SSO) Knowledge of authentication and authorization protocols such as:SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) Experience configuring identity providers and application integrations. Knowledge of user identity lifecycle management and access policies. Experience integrating cloud and enterprise applications with IAM platforms. Understanding of LDAP and directory services. Experience troubleshooting authentication, federation, and access issues.
Responsibilities
Design, configure, and implement IAM solutions using Ping Advanced Identity Cloud (AIC). Configure and manage PingOne Cloud SSO integrations for enterprise and cloud applications. Support and maintain Ping Directory configurations and directory integrations. Implement SSO, federation, authentication, and authorization solutions. Configure applications using SAML, OAuth 2.0, and OpenID Connect (OIDC). Integrate applications, APIs, directories, and identity providers with Ping Identity platforms. Develop and maintain authentication journeys, access policies, and identity workflows. Troubleshoot complex login, authentication, authorization, and federation issues. Work closely with application, security, infrastructure, and cloud teams. Ensure IAM solutions follow enterprise security standards and best practices. Support production deployments, upgrades, and ongoing platform maintenance.
Preferred Qualifications
Experience with other IAM platforms such as Okta, ForgeRock, Azure AD/Entra ID, or SailPoint. Experience with REST APIs and API security. Knowledge of cloud environments such as AWS, Azure, or Google Cloud Platform. Experience with CI/CD and automation for IAM configurations. Relevant Ping Identity certifications are a plus. Experience 5+ years of experience in Identity and Access Management (IAM). Strong hands-on experience with Ping Advanced Identity Cloud (AIC) and PingOne. Foundational or working experience with Ping Directory. Ping AIC + PingOne SSO + Ping Directory + IAM + SAML + OAuth2 + OIDC + SSO + LDAP