IAM Engineer

eNGINE; Pittsburgh (Allegheny County); On-site; USD 110,000 - 140,000; Full time

Job summary

eNGINE, a solutions and placement firm, seeks an IAM Engineer to join our Pittsburgh team and support a financial services client. You will administer Ping Identity platforms (PingOne, PingFederate, PingAccess, PingID), build CIAM capabilities, and craft custom identity workflows for provisioning, authentication, and access management.

You will integrate apps using APIs, SSO, MFA, SAML, OAuth, and OpenID Connect; troubleshoot authentication issues, and collaborate with security and development

Qualifications

• Experience administering or engineering enterprise IAM or CIAM platforms.
• Hands-on experience with Ping Identity technologies such as PingOne, PingFederate, PingAccess, PingID, or ForgeRock preferred.
• Strong understanding of SSO, MFA, SAML, OAuth 2.0, OpenID Connect, and identity lifecycle management.
• Experience integrating applications with identity platforms and troubleshooting authentication issues.
• Familiarity with Microsoft Entra ID, Active Directory, LDAP, and access management principles.
• Understanding of role-based access control, least privilege, and identity governance.
• Strong troubleshooting, documentation, and communication skills.
• Experience working in financial services or another regulated environment is a plus.

Responsibilities

• Administer, configure, and support Ping Identity platforms, including PingOne and related technologies.
• Support the rollout and ongoing enhancement of Customer Identity and Access Management (CIAM) capabilities.
• Develop and maintain custom identity workflows for user provisioning, authentication, account recovery, and access management.
• Integrate enterprise applications with identity platforms using APIs, SSO, MFA, SAML, OAuth, and OpenID Connect.
• Troubleshoot authentication, authorization, provisioning, and platform‑related issues.
• Collaborate with security, infrastructure, and development teams to translate business requirements into technical IAM solutions.
• Develop scripts and automation to streamline identity management processes.
• Establish documentation, monitoring, and operational procedures to support long‑term platform stability.
• Support knowledge transfer and provide technical guidance to internal support teams.

Skills

Ping Identity

SSO

MFA

SAML

OAuth 2.0

OpenID Connect

CIAM

Identity lifecycle

Troubleshooting

Automation

Documentation

Communication

Tools

PingOne

PingFederate

PingAccess

PingID

ForgeRock

Microsoft Entra ID

Active Directory

LDAP

APIs

Job description

eNGINE builds Technical Teams. We are a Solutions and Placement firm shaped by decades of interaction with Technical professionals. Our inspiration is continuous learning, and we pride ourselves on engagement with the IT community. Our goal is to connect our clients with the most knowledgeable and passionate professionals in the industry.

eNGINE is seeking an IAM Engineer to support a financial services organization in Pittsburgh, PA. This individual will be responsible for the administration, configuration, integration, and ongoing support of the organization's Ping Identity platform. The ideal candidate will have hands‑on experience with Ping Identity products, strong knowledge of authentication and identity lifecycle management, and the ability to collaborate with development and security teams to build scalable IAM solutions.

Responsibilities:

• Administer, configure, and support Ping Identity platforms, including PingOne and related technologies.
• Support the rollout and ongoing enhancement of Customer Identity and Access Management (CIAM) capabilities.
• Develop and maintain custom identity workflows for user provisioning, authentication, account recovery, and access management.
• Integrate enterprise applications with identity platforms using APIs, SSO, MFA, SAML, OAuth, and OpenID Connect.
• Troubleshoot authentication, authorization, provisioning, and platform‑related issues.
• Collaborate with security, infrastructure, and development teams to translate business requirements into technical IAM solutions.
• Develop scripts and automation to streamline identity management processes.
• Establish documentation, monitoring, and operational procedures to support long‑term platform stability.
• Support knowledge transfer and provide technical guidance to internal support teams.

Qualifications:

• Experience administering or engineering enterprise IAM or CIAM platforms.
• Hands‑on experience with Ping Identity technologies such as PingOne, PingFederate, PingAccess, PingID, or ForgeRock preferred.
• Strong understanding of SSO, MFA, SAML, OAuth 2.0, OpenID Connect, and identity lifecycle management.
• Experience integrating applications with identity platforms and troubleshooting authentication issues.
• Familiarity with Microsoft Entra ID, Active Directory, LDAP, and access management principles.
• Understanding of role‑based access control, least privilege, and identity governance.
• Strong troubleshooting, documentation, and communication skills.
• Experience working in financial services or another regulated environment is a plus.