Ping Federate and Ping directory

Alignity Solutions; Hyderabad; Hybrid; INR 1,200,000 - 1,800,000; Full time

Job summary

Alignity Solutions is seeking a Senior IAM Engineer to lead PingFederate and PingDirectory deployments for Kroger project in a hybrid work model. The role requires hands-on experience in IAM design, implementation and support with 5+ years in the field.

You will drive integration with Active Directory, Azure AD and Okta, mentor juniors, and coordinate with security and IT teams to ensure scalable, compliant IAM solutions.

Qualifications

• 5-6+ years of IAM engineering experience.
• Hands-on implementation with PingFederate (installation, clustering, SSO/federation).
• 5+ years in IAM solution design, implementation and support.
• Experience with SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, and FIDO2.
• Integration with AD/LDAP, Azure AD and Okta is preferred.
• Proficiency in Java, REST APIs and scripting (Python/Shell).
• Knowledge of Linux, TLS/SSL, load balancers, and PKI management.
• Strong communication and Agile delivery capabilities.

Responsibilities

• Design, install, configure and maintain PingFederate for enterprise SSO and federation.
• Design and deploy PingDirectory (LDAP/SCIM) including schema and replication.
• Configure onboarding of apps to PingFederate via SAML/OAuth/OIDC.
• Develop PingFederate integrations and adapters, including Java plugins.
• Integrate PingFederate with Active Directory/LDAP, Azure AD, Okta and HRIS.
• Lead IAM implementation initiatives from requirements to production support.
• Automate IAM deployment with scripting and CI/CD pipelines.
• Mentor junior engineers and collaborate with cross-functional teams.
• Ensure compliance with regulatory requirements (SOX, GDPR).
• Own IAM policies, lifecycle management and access control standards.

Skills

IAM engineering

PingFederate

PingDirectory

SAML 2.0

OAuth 2.0

OIDC

LDAP

Java

REST APIs

Agile

Tools

PingFederate

PingDirectory

Active Directory/LDAP

Azure AD

Java

Job description

Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you.

Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees.

If you are a Ping Federate & Directory Consultant, looking for excitement, challenge and stability in your work, then you would be glad to come across this page.

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.

Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution.

Location: HYDERABAD | BANGALORE | PUNE | CHENNAI | MUMBAI | GURUGOAN | KOLKOTTA
Experience: 5 - 8Years
Employment Type: Contract to hire
Work Mode:Hybrid
Notice Period: 0-15 days

Requirements

Job Summary:

Kroger project: we are looking for a SeniorIAM Engineer – Ping Identity (PingFederate & PingDirectory) with deep,hands-on implementation experience in PingFederate and PingDirectory to join our IAM team. The ideal candidate should have at least 5 years ofexperience in IAM solution design, implementation, and support,strong IAM and federation fundamentals, and a proven ability to deliverend-to-end Ping deployments and work across cross-functional teams.Hands-on experience with PingFederate, PingDirectory, ActiveDirectory, Okta/Azure AD, and a collaborative, leadership mindsetare highly valued.

Key Responsibilities:

• Design, install, configure, implement, and maintain PingFederate (clustered, highly available deployments) for enterprise SSO andfederation.
  
• Design, deploy, and operate PingDirectory (LDAP/SCIMdirectory services), including schema design, replication topology,indexing, data migration, and performance tuning.
  
• Configure and onboard applications to PingFederate using SAML2.0, OAuth 2.0, and OpenID Connect, including adapters, authenticationpolicies, access token managers, and attribute mappings.
  
• Build and customize PingFederate integrations: IdP and SPconnections, authentication selectors, password credential validators,OAuth client management, and custom Java-based plugins/adapters as needed.
  
• Integrate PingFederate and PingDirectory with ActiveDirectory/LDAP, Azure AD, Okta, HR systems, and other identity providersand data sources.
  
• Lead IAM implementation initiatives from requirements anddesign through build, testing, cutover, and production support.
  
• Drive automation of IAM deployment and administration usingscripting (Python, Shell, PowerShell), Ping Admin APIs, and CI/CDpipelines.
  
• Collaborate with Security, HR, IT Ops, and Application teams toensure a scalable, secure IAM architecture.
  
• Act as a technical mentor and lead for junior engineers andsupport teams.
  
• Support identity lifecycle processes and participate in IAMrisk assessments and internal/external audits, ensuring compliance withregulatory requirements such as SOX and GDPR.
  
• Develop and implement policies, procedures, and standardsrelated to IAM lifecycle, authentication, federation, and entitlementmanagement.
  
• Provide technical leadership and mentorship to other teammembers on PingFederate, PingDirectory, Okta, Azure AD, etc.
  
• Enables single sign-on (SSO), federation, and MFA/passwordlessservices to provide secure and seamless user experiences
  
• Designs and automates authentication and authorization flowsfor all identities across Kroger, including workforce, partner, andcustomer use cases
  
• Collaborates with IT and business stakeholders to define andimplement IAM solutions related to authentication and access controlsthat improve Kroger's cybersecurity processes and end-user experiences
  
• Drives continuous improvement of authentication andauthorization processes
  
• Provides subject matter expertise to business areas who aremanaging their own control environment in regards to authentication andaccess controls
  
• Collaborates with the Cybersecurity GRC team to ensureIAM-related policies and standards are kept up-to-date and aligned toapplicable compliance requirements
  
• Develops IAM business processes, risk and controls based onindustry best practices and applicable compliance requirements
  
• Develops and maintains monitoring, patching, backup/DR, andupgrade processes for Ping platforms
  

Required Qualifications:

• 5-6+ years of experience in IAMengineering, implementation, architecture, and support.
  
• 3+ years of hands-on implementation experience withPingFederate (installation, clustering,SSO/federation configuration, application onboarding, upgrades, andproduction support).
  
• 2+ years of hands-on implementation experience withPingDirectory (deployment, schema andreplication design, data migration/synchronization, performance tuning,and support).
  
• Strong experience with federation and authentication standards:SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, and FIDO2.
  
• Experience integrating Ping with Active Directory/LDAP, AzureAD/Entra ID, Okta, HRIS systems, and SaaS/enterprise applications.
  
• Proficiency in Java (custom adapters/plugins), REST APIs, andscripting (Python, Shell, or PowerShell); experience with the PingFederateand PingDirectory admin APIs.
  
• Experience with load balancers, PKI/certificate management, andTLS/SSL configuration in IAM environments.
  
• Strong understanding of IAM principles, including RBAC, ABAC,MFA, passwordless authentication, and privileged access.
  
• Experience supporting Ping deployments in Linux andcloud/hybrid environments (AWS, Azure, or GCP).
  
• Ability to work in Agile environments and lead sprint-based IAMdelivery efforts.
  
• Excellent communication, documentation, and collaborationskills, with the ability to clearly communicate technical concepts to bothtechnical and non-technical audiences.
  
• Ability to translate business requirements into technicaldesigns, detailed requirements, and architecture models.
  

Preferred Skills & Good to Have:

• Experience with other Ping Identity products such asPingAccess, PingID, PingOne, and PingDataGovernance.
  
• Experience with Identity Governance & Administration (IGA)platforms such as SailPoint IdentityNow/ISC.
  
• Understanding of Zero Trust Architecture and security bestpractices.
  
• CI/CD pipeline configuration for Ping deployments andconfiguration promotion (e.g., Jenkins, GitLab CI, Azure DevOps, or GitHubActions).
  
• Experience with containerized Ping deployments (Docker,Kubernetes, Helm) and Infrastructure-as-Code (Terraform, Ansible).
  
• Ping Identity, Okta, SailPoint, or cybersecurity certifications(e.g., PingFederate/PingDirectory certifications, CISSP, etc.).
  
• Experience working in regulated environments (e.g., HIPAA, SOX,GDPR compliance).
  
• Exposure to other IAM tools like CyberArk, ForgeRock, or Oktais a plus.
  
• Competency in security frameworks including NIST CSF, NIST800-53, ISO 27001, SOX.
  
• Retail and/or grocery industry experience a plus.