IAM Architect

Next Ventures; Toulouse; Hybride; EUR 70 000 - 95 000; Plein temps

Résumé du poste

Next Ventures is seeking an experienced Ping Identity Architect to lead a major migration from on-prem Ping Identity to Ping Cloud in Toulouse. You will own the target architecture, migration strategy, and hands-on implementation across SSO, MFA, and federation.

Responsibilities include designing the cloud architecture, migrating users and policies, and ensuring successful testing, rollback planning, and handover with comprehensive documentation.

Qualifications

• Experience as Ping Identity or IAM architect with on-prem to cloud migrations.
• Hands-on knowledge of PingOne, PingFederate, PingAccess and PingDirectory.
• Expertise in SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, MFA and identity federation.

Responsabilités

• Lead the architecture and migration strategy for Ping Cloud.
• Design target Ping Cloud architecture and oversee implementation.
• Produce technical documentation and support deployment handover.

Connaissances

Ping Identity Architect

IAM Architecture

Cloud Migration

SSO & MFA

Federation & APIs

Outils

PingOne

PingFederate

PingAccess

PingDirectory

Description du poste

Next Ventures is partnering with a leading organisation seeking an experienced Ping Identity Architect to lead the architecture and implementation of a major migration from an on-premises Ping Identity environment to Ping Cloud.

The Role:

You will take ownership of the target architecture, migration strategy and hands-on implementation. Key responsibilities will include:

• Assessing the existing environment and designing the target Ping Cloud architecture
• Migrating applications, users, policies and federation connections from on-premises Ping solutions
• Implementing SSO, federation, MFA, passwordless authentication and integrations with applications, directories and APIs

You will also oversee testing, coexistence and rollback planning while producing technical documentation and supporting the solution through deployment and operational handover.

Required Experience:

The ideal consultant will have:

• Strong experience as a Ping Identity or IAM Architect, including on-premises-to-cloud migrations
• Hands-on knowledge of PingOne, PingFederate, PingAccess and PingDirectory
• Expertise in SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, MFA and identity federation

Experience with PingOne Advanced Identity Cloud, DaVinci, DevOps or infrastructure-as-code would be advantageous. Ping Identity certification and French language skills are also desirable.

• Location: Toulouse, France – hybrid
• Contract: November 2026 to November 2027
• Focus: IAM architecture and hands-on Ping Cloud implementation