PingSSO L3

Blupace Hyderabad; Hyderabad; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Bluepace Tech is seeking an experienced IAM SSO L3 Engineer with strong PingFederate, Ping Identity, and Microsoft Entra ID expertise. The role focuses on advanced technical support, design, implementation, troubleshooting, and continuous improvement of enterprise IAM solutions.

You will act as the L3 escalation point for complex SSO issues, perform RCA, design and implement PingFederate and Entra ID solutions, and collaborate with cross-functional teams to deliver secure IAM architectures.

Qualifications

• Hands-on experience with PingFederate and SSO
• Expertise in Microsoft Entra ID (Azure AD) administration
• Strong knowledge of SAML 2.0, OAuth 2.0 and OpenID Connect (OIDC)
• Experience configuring identity federation, authentication policies, app registrations, and adapters
• Knowledge of Conditional Access, MFA, PIM, RBAC and identity security
• Experience handling L3 escalations, troubleshooting, incident management and RCA
• Scripting and automation using PowerShell
• Strong documentation and stakeholder management skills

Responsibilities

• Act as the L3 escalation point for complex SSO, federation, and authentication issues.
• Perform RCA and implement permanent solutions to recurring incidents.
• Design, implement, and enhance PingFederate and Microsoft Entra ID solutions.
• Configure identity federation using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Manage SP and IdP integrations, app registrations, and PingFederate adapters.
• Implement and manage security controls, including MFA, Conditional Access, and PIM.
• Automate routine administration using PowerShell scripting.
• Maintain technical documentation, architectural diagrams, SOPs, and knowledge base articles.
• Collaborate with application owners, security, DevOps, and architecture teams.
• Mentor L1/L2 support engineers and provide technical guidance on IAM issues.

Skills

PingFederate

Ping Identity

Azure AD

SSO

PowerShell

MFA

Tools

PingFederate Admin

Job description

Bluepace Tech is looking for an experienced IAM Single Sign-On (SSO) L3 Engineer with strong expertise in PingFederate, Ping Identity, and Microsoft Entra ID (Azure AD).

The ideal candidate will be responsible for advanced technical support, solution design, implementation, troubleshooting, and continuous improvement of enterprise-level identity and access management solutions.

What you'll do:

• Act as the L3 escalation point for complex SSO, federation, and authentication issues.
• Perform root cause analysis (RCA) and implement permanent solutions to recurring incidents.
• Design, implement, and enhance enterprise-level PingFederate and Microsoft Entra ID solutions.
• Configure and manage identity federation using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Manage Service Provider (SP) and Identity Provider (IdP) integrations, application registrations, and PingFederate adapters.
• Implement and manage security controls, including Multi-Factor Authentication (MFA), Conditional Access, and Privileged Identity Management (PIM).
• Automate routine administration, monitoring, and management tasks using PowerShell scripting.
• Maintain technical documentation, architectural diagrams, SOPs, and knowledge base articles.
• Collaborate with application owners, security teams, DevOps, and architecture teams to deliver secure IAM solutions.
• Mentor L1/L2 support engineers and provide technical guidance on complex IAM issues.

Must-have skills:

• Strong hands-on experience with PingFederate and Single Sign-On (SSO).
• Expertise in Microsoft Entra ID (Azure AD) administration and configuration.
• Strong understanding of SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) protocols.
• Experience configuring identity federation, authentication policies, application registrations, and adapters.
• Knowledge of Conditional Access, MFA, PIM, role-based access control (RBAC), and identity security.
• Experience handling L3 escalations, complex troubleshooting, incident management, and RCA.
• Scripting and automation experience using PowerShell.
• Strong documentation, stakeholder management, and problem-solving skills.

Preferred skills:

• Knowledge of PingAccess and other Ping Identity solutions.
• Experience with Entra Connect synchronization, roles, and access management.
• Experience designing highly available, scalable, and secure SSO solutions.
• Exposure to enterprise IAM architecture, security compliance, and continuous service improvement.

Key Competencies:

• Identity & Access Management (IAM)
• Single Sign-On (SSO)
• PingFederate / Ping Identity
• Microsoft Entra ID (Azure AD)
• SAML 2.0 / OAuth 2.0 / OpenID Connect
• Federation & Authentication
• MFA / Conditional Access / PIM
• PowerShell Automation
• L3 Support / RCA / Incident Management
• IAM Solution Design & Integration