Haystack
← Back to Jobs
Engineering

IAM PingFederate Engineer

kjohn@samrusystems.comUnited States🇺🇸United StatesPosted 10 Aug 2026

Why This Role Stands Out

This hybrid role offers a fantastic opportunity to deepen your expertise in enterprise IAM solutions, particularly with Ping Identity products, while contributing to a robust security architecture. If you have extensive experience with PingFederate and a strong understanding of federation protocols, this position is perfect for you to advance your career. Apply today to join a team focused on cutting-edge identity management!

Quick Overview

Work Type
Hybrid
Level
Mid Senior

Job Description

Experience: 10+ Years
Visa: EAD, TN, L2, E2, (No H1B & OPT)
Job Description:
We are seeking an experienced Senior IAM PingFederate Engineer to design, deploy, configure, and maintain enterprise Identity and Access Management (IAM) solutions with a heavy focus on Ping Identity products (PingFederate, PingAccess, PingOne, PingDirectory). The ideal candidate will serve as a Subject Matter Expert (SME) in single sign-on (SSO), federation, multi-factor authentication (MFA), and identity federation across cloud and on-premises environments.
Key Responsibilities
Architect, configure, and maintain enterprise PingFederate instances across multi-region environments.
Manage PingDirectory / PingAccess policy rules, engine configurations, and identity data stores.
Enforce Zero-Trust architecture, Role-Based Access Control (RBAC), and Attribute-Based Access Control (ABAC).
Support security incident response, audits, penetration testing remediation, and compliance reporting (SOC2, ISO 27001, GDPR).
Required Qualifications & Skills
Experience: 10+ years in enterprise Identity & Access Management (IAM) with at least 4–5+ years of hands-on experience dedicated to PingFederate.
Federation Protocols: Expert knowledge of SAML 2.0, OAuth 2.0, OIDC, WS-Trust/WS-Fed, and SCIM provisioning.
Ping Product Suite: Strong proficiency in PingFederate, PingDirectory, PingAccess, and PingOne/PingID.
Directory Services: Deep experience with LDAP directories (PingDirectory, Active Directory, UnboundID).
Development/Scripting: Proficiency in Java (for custom adapters), Python, PowerShell, or Bash.
Web & Middleware: Hands-on experience with web servers (Apache, Nginx, IIS) and RESTful API authentication models.
Networking Security: Understanding of SSL/TLS certificates, reverse proxies, firewalls, and load balancing (F5/AWS ALB).
Cloud Infrastructure: Hands-on experience with AWS, Azure, or Google Cloud Platform identity integration.
DevOps/Automation: Experience with CI/CD pipelines, Ansible, Terraform, Docker, or Kubernetes for Ping deployment.
Certifications:
Ping Identity Certified Professional / Specialist (PingFederate / PingAccess)
CISSP or CISM certification

Similar jobs

Apply now