PingFederate IAM Engineer

Seeking a qualified contractor for a one-year engagement to support the migration of authentication integrations from PingFederate to Microsoft Entra across approximately 1,600 production and nonproduction connections.
Primary Responsibilities

• Assess existing PingFederate integrations and identify Entra migration requirements, gaps, risks, and dependencies.
• Develop repeatable migration patterns for SAML, OAuth/OIDC, WebLogic, Spring, Apache, iWeb, and SaaS applications.
• Coordinate with application owners and developers to update, test, and validate integrations.
• Support migration waves through DEV, PRE, and PROD.
• Troubleshoot complex authentication issues, including RSA dependencies, token exchanges, custom SAML, and certificate-based authentication.
• Document current and target architectures, implementation procedures, testing plans, rollback procedures, and lessons learned.

Required Expertise
The ideal candidate should have demonstrated experience with:

• PingFederate-to-Entra migrations.
• Microsoft Entra application registrations, claims, attributes, permissions, policies, and directory synchronization.
• SAML, OAuth, OIDC, LDAP, certificate-based authentication, PIV, and YubiKey.
• RSA authentication assessment and replacement planning.
• Large-scale application integration and migration programs.
• Secure testing, privileged identities, administrative YubiKeys, and access approvals.

Desired Working Style
The contractor should be able to:

• Begin with low-complexity, repeatable applications and scale migration procedures across application groups.
• Work effectively with infrastructure teams, application owners, developers, AD, Entra, PingFederate, and project management teams.
• Maintain consistency between nonproduction and production environments.
• Communicate technical issues clearly and provide practical recommendations.
• Support a controlled, iterative migration approach while adapting procedures based on lessons learned.

Key Evaluation Criteria
Candidates should demonstrate:

1. Successful experience migrating authentication integrations from PingFederate to Microsoft Entra.
2. Strong hands-on knowledge of enterprise authentication protocols and Entra administration.
3. Experience supporting complex application stacks and authentication dependencies.
4. Ability to plan and execute structured migration waves with testing and rollback controls.
5. Strong documentation, troubleshooting, coordination, and stakeholder communication skills.