Other

CIAM Architect

SAI Systems Intl., Inc.United States🇺🇸United StatesPosted Oct 16, 2026

Why This Role Stands Out

Elevate your career as a CIAM Architect at SAI Systems Intl., Inc., where you'll design and implement cutting-edge identity solutions with significant growth potential. This hybrid role is perfect for experienced Ping Identity/IAM engineers who thrive on complex challenges and want to contribute to a reputable organization. Embrace this exciting opportunity to shape secure digital experiences and advance your expertise.

Quick Overview

Seniority

Mid Senior

Work mode

Hybrid

Location

United States

Posted

20 hours ago

AWSMFAOAuthSAMLSSOAzureGoogle CloudGroovyJavaScriptLDAPZero Trust

Job Description

About the Role
We are looking for an experienced IAM Engineer to design, implement, and support enterprise identity solutions built on the Ping Identity platform. The ideal candidate has strong hands-on expertise with Ping Advanced Identity Cloud and PingOne, along with working knowledge of Ping Directory, and can operate as a key contributor in securing access across cloud and on-premises applications.

Key Responsibilities

Design, configure, and maintain Advanced Identity Cloud (AIC) environments, including authentication trees, journeys, policies, and integrations with downstream applications.
Implement and manage Single Sign-On (SSO), MFA, and adaptive authentication using PingOne.
Support and maintain Ping Directory instances for identity data storage, replication, and basic directory operations.
Integrate Ping solutions with enterprise applications via SAML, OAuth 2.0, OIDC, and SCIM.
Troubleshoot authentication, authorization, and federation issues across the Ping ecosystem.
Collaborate with security, infrastructure, and application teams to ensure identity solutions align with organizational security policies.
Participate in upgrades, patching, and lifecycle management of Ping platform components.
Create and maintain technical documentation, runbooks, and configuration standards.
Support incident response and root-cause analysis for identity-related issues.

Required Skills & Experience

Ping Advanced Identity Cloud (AIC) – Advanced proficiency: Deep experience configuring authentication journeys, policies, scripts, and integrations.
PingOne (Cloud SSO) – Advanced proficiency: Strong experience with SSO configuration, application integrations, MFA policies, and administration.
Ping Directory – Foundational knowledge: Understanding of directory services, LDAP concepts, and basic administration/troubleshooting.
Solid understanding of identity protocols: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM.
Experience with scripting (JavaScript/Groovy) for authentication node customization is a plus.
Familiarity with cloud platforms (AWS/Azure/Google Cloud Platform) supporting identity deployments.
Strong troubleshooting and analytical skills in distributed, security-sensitive environments.

Preferred Qualifications

Ping Identity certifications (AIC, PingOne, or PingFederate).
Experience with CI/CD pipelines for identity configuration deployment.
Background in enterprise security, zero trust architecture, or identity governance.

Soft Skills

Strong communication skills to work across security, engineering, and business teams.
Ability to document and explain complex identity workflows clearly.
Comfortable working independently and in a fast-paced, evolving environment.