Ping Engineer

Capgemini; Hyderabad, Bengaluru; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Capgemini in Hyderabad seeks an experienced Identity & Access Management (IAM) Engineer to design, implement, and support enterprise authentication solutions built on the Ping Identity platform. The role focuses on PingFederate, PingAccess, and PingOne DaVinci to deliver secure, scalable IAM across cloud and on-prem environments.

You will collaborate with security and IT teams to meet IAM requirements, integrate with directory services, MFA, and downstream apps, and create comprehensive

Qualifications

• 3+ years with PingFederate (federation, SSO, token management, adapters).
• 2+ years with PingAccess (policy config, reverse proxy, API protection).
• Experience building flows in PingOne DaVinci (orchestration, connectors, low-code auth journeys).
• Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Fed.
• Experience with Active Directory/LDAP and MFA integrations.
• Familiarity with REST APIs and scripting (Python/PowerShell/Java).
• Understanding of Zero Trust, security best practices, risk-based authentication.
• Troubleshooting across distributed, multi-tier systems.

Responsibilities

• Configure, deploy, and maintain PingFederate for SSO, federation, and identity bridging.
• Implement and manage PingAccess policies for web access management and API protection.
• Build authentication journeys and adaptive policies using PingOne DaVinci.
• Integrate Ping solutions with directory services, IdPs/SPs, MFA providers, and downstream apps.
• Develop and maintain adapters, connectors, and policy contracts within Ping ecosystem.
• Troubleshoot authentication, federation, and authorization issues across Ping products.
• Collaborate with security, application, and infra teams to define IAM requirements and standards.
• Create and maintain docs, runbooks, and architecture diagrams.

Skills

PingFederate

PingAccess

PingOne DaVinci

Identity protocols

Directory services

REST APIs

Scripting

Zero Trust

Troubleshooting

Job description

Identity & Access Management Engineer Ping Identity (PingFederate, PingAccess, PingOne DaVinci)

About the Role

We are seeking an experienced Identity & Access Management (IAM) Engineer to design, implement, and support enterprise identity solutions built on the Ping Identity platform. The ideal candidate has hands-on expertise with PingFederate, PingAccess, and PingOne DaVinci, and can architect secure, scalable authentication and authorization workflows across cloud and on-premises environments.

Key Responsibilities

• Configure, deploy, and maintain PingFederate for SSO, federation (SAML 2.0, OAuth 2.0, OIDC), and identity bridging across internal and external applications.
• Implement and manage PingAccess policies for web access management, reverse proxy configurations, and API/application protection.
• Build and optimize authentication journeys, orchestration flows, and adaptive/risk-based policies using PingOne DaVinci.
• Integrate Ping solutions with directory services (Active Directory, LDAP), IdPs/SPs, MFA providers, and downstream applications.
• Develop and maintain custom adapters, connectors, and policy contracts within the Ping ecosystem.
• Troubleshoot authentication, federation, and authorization issues across PingFederate, PingAccess, and DaVinci flows.
• Collaborate with security, application, and infrastructure teams to define IAM requirements and ensure compliance with security standards (NIST, Zero Trust, etc.).
• Create and maintain technical documentation, runbooks, and architecture diagrams.

Required Qualifications

• 3+ years of hands-on experience with PingFederate (federation, SSO, token management, adapters).
• 2+ years of experience with PingAccess (policy configuration, reverse proxy, API protection).
• Practical experience building flows in PingOne DaVinci (orchestration, connectors, no-code/low-code authentication journeys).
• Strong understanding of identity protocols: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Fed.
• Experience integrating with directory services (Active Directory, LDAP) and MFA solutions.
• Familiarity with REST APIs and scripting (Python, PowerShell, or Java) for automation and custom integrations.
• Solid understanding of security best practices, Zero Trust principles, and risk-based authentication.
• Strong troubleshooting skills across distributed, multi-tier systems.