Ping Identity Consultant

Datamatics-Global-Services-Ltd; Lahore; On-site; PKR 1,800,000 - 3,200,000; Full time

Job summary

Datamatics-Global-Services-Ltd is seeking an experienced Ping Identity IAM Administrator to manage and optimize identity and access management solutions across enterprise environments. You will work hands-on with Ping Identity suite to ensure secure, seamless access through advanced authentication and authorization mechanisms.

The role focuses on implementing SSO, MFA, passwordless methods, adaptive authentication, and governance across systems, with strong collaboration across IT security and

Qualifications

• 5–8 years of experience in Identity & Access Management (IAM).
• Strong hands-on experience with Ping Identity Suite.
• Expertise in SSO protocols (SAML, OAuth, OpenID Connect).
• Experience implementing MFA and passwordless authentication.
• Strong understanding of adaptive/risk-based authentication.
• Familiarity with directory services (LDAP, Active Directory).
• Experience in access control models (RBAC, ABAC).
• Knowledge of security best practices and IAM frameworks.
• Preferred certifications in IAM or Ping Identity solutions.
• Experience with cloud platforms (AWS, Azure, GCP).
• Knowledge of API security and Zero Trust architecture.
• Exposure to DevOps and automation tools.

Responsibilities

• Manage and optimize IAM across enterprise environments.
• Administer centralized identity management including user lifecycle.
• Maintain visibility for identity governance and access.
• Ensure high availability, scalability, and performance of IAM solutions.
• Design and implement SSO across enterprise applications.
• Deploy MFA and passwordless authentication strategies.
• Enforce RBAC/ABAC policies and least privilege access.
• Manage access certifications, reviews, and approvals.
• Generate logs and audit trails for authentication activities.
• Support compliance audits and incident investigations.
• Implement no-code/low-code authentication workflow orchestration.

Skills

IAM

Ping Identity

SSO

MFA

Passwordless

Adaptive authentication

LDAP/AD

RBAC/ABAC

Security best practices

IAM frameworks

Cloud (AWS/Azure/GCP)

API security

Zero Trust

DevOps/Automation tools

Communication

Stakeholder management

Education

IAM certifications (Ping Identity)

Job description

Job Title: Ping Identity Consultant

Job Summary

We are seeking an experienced Ping Identity IAM Administrator to manage, implement, and optimize identity and access management solutions across enterprise environments. The ideal candidate will have hands-on expertise in Ping Identity suite products and will be responsible for ensuring secure, seamless, and compliant access to organizational systems through advanced authentication and authorization mechanisms.

Key Responsibilities

• Identity & Access Management
• Administer and support centralized identity management, including user lifecycle (onboarding, offboarding, role changes).
• Maintain a “single pane of glass” for identity governance and user access visibility.
• Ensure high availability, scalability, and performance of IAM solutions.
• Authentication & Security
• Implement and manage Single Sign-On (SSO) across enterprise applications.
• Design and deploy Multi-Factor Authentication (MFA) and passwordless authentication strategies.
• Configure and maintain adaptive authentication policies based on risk signals and user behavior.
• Access Control & Governance
• Define and enforce policy-based access control (RBAC/ABAC).
• Ensure least privilege access principles are applied across systems.
• Manage access certifications, reviews, and approvals.
• Compliance & Auditing
• Generate and analyze logs, reports, and audit trails for authentication and access activities.
• Support compliance requirements (e.g., regulatory audits, internal security policies).
• Investigate and respond to identity-related security incidents.
• Orchestration & Automation

Design authentication workflows using no-code/low-code orchestration tools.
Automate identity processes to improve efficiency and reduce manual effort.

Core Technologies / Key Components

• PingOne (Cloud Identity Platform)
• PingFederate (Federation & SSO)
• PingID (MFA Solution)
• PingAccess (Access Management & API Security)
• PingDirectory (User Data Store)PingOne DaVinci (No-code orchestration)

Required Skills & Experience

• 5–8 years of experience in Identity & Access Management (IAM).
• Strong hands‑on experience with Ping Identity Suite.
• Expertise in SSO protocols (SAML, OAuth, OpenID Connect).
• Experience implementing MFA and passwordless authentication.
• Strong understanding of adaptive/risk-based authentication.
• Familiarity with directory services (LDAP, Active Directory).
• Experience in access control models (RBAC, ABAC).
• Knowledge of security best practices and IAM frameworks.
• Preferred Qualifications
• Relevant certifications in IAM or Ping Identity solutions.
• Experience with cloud platforms (AWS, Azure, GCP).
• Knowledge of API security and Zero Trust architecture.
• Exposure to DevOps and automation tools.
• Soft Skills
• Strong analytical and problem-solving skills
• Excellent communication and stakeholder management
• Ability to work in a fast-paced, collaborative environment
• Key Outcomes
• Secure and seamless user authentication experience
• Strong governance and compliance posture
• Efficient identity lifecycle management
• Reduced security risks through robust IAM controls