PingOne CIAM Engineer

Title            : PingOne CIAM Engineer

Location    : Milpitas, CA (onsite)

Key Responsibilities

• Design, configure, implement, and support PingOne-based CIAM solutions.
• Configure and maintain customer authentication, registration, account recovery, and identity-management journeys.
• Integrate web and mobile applications with PingOne using standard identity protocols and APIs.
• Work with OAuth 2.0, OpenID Connect (OIDC), SAML, SSO and MFA patterns as applicable to application requirements.
• Configure and support customer identity profiles, attributes, roles, authorization, and access policies.
• Develop and maintain identity orchestration flows using PingOne DaVinci.
• Integrate PingOne with applications, APIs, directories, third-party identity providers, security services, and other enterprise platforms.
• Configure DaVinci flows, connectors, business logic, policies, and reusable customer journeys. Ping Identity documents DaVinci as a no-code orchestration service that can connect identity technologies and applications through flows and integrations.
• Support application onboarding and CIAM integration activities.
• Troubleshoot authentication, authorization, federation, application integration, and customer login issues.
• Perform root-cause analysis for complex CIAM incidents and identify permanent corrective actions.
• Support configuration promotion across development, staging/test, and production environments. Ping Identity documents configuration promotion between sequential environments as part of its development capabilities.
• Participate in design reviews, code/configuration reviews, testing, release readiness, and production deployments.
• Support monitoring, incident management, problem management, change management, and production stabilization.
• Maintain appropriate administrator privileges and follow least-privilege principles. PingOne provides built-in administrative roles including Environment Admin, Identity Data Admin, DaVinci Admin, Client Application Developer, Application Owner, Help Desk Admin, and other administrative roles.
• Create and maintain technical documentation, integration specifications, configuration documentation, troubleshooting guides, and operational runbooks.
• Collaborate with security and architecture teams to ensure CIAM implementation aligns with security and privacy requirements.

Mandatory Technical Skills

Candidates should have hands-on experience in most of the following:

Ping Identity / CIAM

• PingOne
• Customer Identity & Access Management (CIAM)
• Authentication and authorization
• Customer registration and self-service identity journeys
• MFA / strong authentication
• Application onboarding and integration
• Identity attributes, roles, and access policies