Ping Identity IAM Consultant

Datamatics Technologies LLC; Riyadh; Presencial; SAR 180.000 - 300.000; Jornada completa

Descripción de la vacante

Datamatics Technologies LLC is seeking an experienced Ping Identity IAM Consultant to design, implement, and support enterprise IAM solutions using the Ping Identity platform. The role focuses on secure and scalable identity and access across applications and environments.

The ideal candidate has hands-on experience with PingFederate, PingAccess, PingID/PingOne, SAML 2.0, OAuth 2.0, and OIDC, plus LDAP/AD integrations and RBAC in large organizations.

Formación

• 5–8 years of hands‑on experience in Identity & Access Management (IAM) within enterprise environments.
• Strong hands‑on experience with the Ping Identity platform for implementing and supporting IAM solutions.
• Proven experience configuring and administering PingFederate for federation, authentication, and Single Sign-On.
• Hands‑on experience with PingAccess for securing enterprise applications, APIs, and access policies.
• Practical experience with PingID and/or PingOne for MFA and secure authentication.
• Strong knowledge of SSO and federation, with hands‑on implementation using SAML 2.0.
• Strong working experience with OAuth 2.0 and OpenID Connect (OIDC).
• Experience implementing and troubleshooting MFA and enterprise authentication flows.
• Experience integrating IAM with LDAP and Active Directory.
• Good understanding of RBAC, least‑privilege access, and Identity Lifecycle Management.

Responsabilidades

• Implement, configure, administer, and support enterprise IAM solutions using the Ping Identity platform.
• Configure and manage PingFederate for enterprise federation, SSO, and application integrations.
• Configure and support PingAccess to secure enterprise applications and APIs through appropriate access policies.
• Implement and manage PingID/PingOne for MFA and secure user authentication.
• Integrate enterprise applications using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Integrate Ping Identity solutions with LDAP, Active Directory, and other identity sources.
• Manage identity lifecycle processes, including user onboarding, role changes, access provisioning, and de‑provisioning.
• Configure and maintain appropriate access controls based on RBAC and least‑privilege principles.
• Troubleshoot complex SSO, authentication, authorization, federation, token, certificate, and application integration issues.
• Monitor IAM services and authentication activities with security, application, infrastructure, and DevOps teams.

Conocimientos

Ping Identity platform

PingFederate

PingAccess

PingID/PingOne

SSO & federation

OAuth 2.0 & OIDC

MFA

LDAP/Active Directory

RBAC & least-privilege

Identity Lifecycle Management

Passwordless authentication

Adaptive authentication

ABAC

Cloud IAM integration

PingDirectory

PingOne DaVinci

Educación

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering

Herramientas

PingDirectory

PingOne DaVinci

Descripción del empleo

Experience: 5–8 Years
Domain: Identity & Access Management (IAM)

Job Summary

We are seeking an experienced Ping Identity IAM Consultant with strong hands‑on expertise in implementing, configuring, integrating, and supporting enterprise IAM solutions using the Ping Identity platform.

The ideal candidate should have practical experience with PingFederate, PingAccess, PingID/PingOne, modern authentication and federation protocols, and enterprise directory integrations. The role will focus on delivering secure, scalable, and reliable identity and access solutions across enterprise applications and environments.

Key Responsibilities

1. Implement, configure, administer, and support enterprise IAM solutions using the Ping Identity platform.

2. Configure and manage PingFederate for enterprise federation, Single Sign-On (SSO), and application integrations.

3. Configure and support PingAccess to secure enterprise applications and APIs through appropriate access policies.

4. Implement and manage PingID/PingOne for Multi‑Factor Authentication (MFA) and secure user authentication.

5. Integrate enterprise applications using SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC) standards.

6. Integrate Ping Identity solutions with LDAP, Active Directory, enterprise applications, APIs, and other identity sources.

7. Manage identity lifecycle processes, including user onboarding, role changes, access provisioning, and de‑provisioning.

8. Configure and maintain appropriate access controls based on RBAC, least‑privilege principles, and organizational security policies.

9. Troubleshoot complex SSO, authentication, authorization, federation, token, certificate, and application integration issues.

10. Monitor IAM services and authentication activities while collaborating with security, application, infrastructure, and DevOps teams to maintain reliable and secure IAM environments.

Core / Must-Have Skills

1. 5–8 years of hands‑on experience in Identity & Access Management (IAM) within enterprise environments.

1. Strong hands‑on experience with the Ping Identity platform for implementing and supporting IAM solutions.

2. Proven experience configuring and administering PingFederate for federation, authentication, and Single Sign-On.

3. Hands‑on experience with PingAccess for securing enterprise applications, APIs, and access policies.

4. Practical experience with PingID and/or PingOne for Multi‑Factor Authentication and secure authentication.

5. Strong knowledge of SSO and federation, with hands‑on implementation experience using SAML 2.0.

6. Strong working experience with OAuth 2.0 and OpenID Connect (OIDC) for application and API authentication and authorization.

7. Experience implementing and troubleshooting MFA and enterprise authentication flows.

8. Strong experience integrating IAM solutions with LDAP and Active Directory, including identity attributes and user directory integrations.

9. Good understanding of RBAC, least‑privilege access, and Identity Lifecycle Management, including provisioning and de‑provisioning.

Good-to-Have Skills

1. Experience with PingDirectory as an enterprise identity data store and directory service.

2. Hands‑on exposure to PingOne DaVinci for identity orchestration and workflow automation.

3. Experience implementing passwordless authentication and modern authentication approaches.

4. Knowledge of adaptive and risk‑based authentication using contextual and risk signals.

5. Understanding of Attribute‑Based Access Control (ABAC) and advanced authorization models.

6. Experience with API security and protecting APIs using modern identity and access standards.

7. Understanding of Zero Trust Architecture and its application within enterprise IAM environments.

8. Experience integrating IAM solutions with cloud platforms such as Azure, AWS, or GCP.

9. Exposure to DevOps, CI/CD, scripting, and IAM automation for deployment and operational efficiency.

10. Relevant Ping Identity, IAM, cloud, or security certifications would be an advantage.

Education

Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, Software Engineering, or a related discipline.