IAM Engineer

First National Bank; Pittsburgh (Allegheny County); On-site; USD 110,000 - 160,000; Full time

Job summary

First National Bank is seeking an IAM Engineer to administer and engineer the Ping Identity platform, ensuring secure, reliable identity management for customers and employees. You will serve as the Ping subject-matter expert, architecting lifecycle workflows, integrations, and access controls.

You will document requirements, lead deployments, and coordinate incident response with security, applications, and infrastructure teams to maintain a robust identity system across the organization.

Qualifications

• BA or BS degree required.
• 5+ years of job-related experience.
• Strong communication and organizational skills are essential.

Responsibilities

• Administers and supports Ping Identity environments and configurations to maintain secure, scalable identity platform.
• Leads identity lifecycle and authentication processes, including provisioning, deprovisioning, and password reset.
• Documents integration requirements and ownership for production deployments.
• Develops automated workflows and data mappings to improve lifecycle reliability.
• Investigates and resolves complex Ping platform issues and coordinates with stakeholders.

Skills

Communication

Project management

Organizational skills

Analytical skills

Interpersonal skills

Detail-oriented

Multitasking

MS Excel

MS PowerPoint

Identity engineering

APIs

OAuth/OIDC

SAML

MFA

Cloud identity platforms

Ping Identity

API scripting

CI/CD tooling

Education

BA or BS

Tools

Ping Identity

API scripting

CI/CD tooling

Job description

Primary Office Location: 626 Washington Place. Pittsburgh, Pennsylvania. 15219. Join our team. Make a difference - for us and for your future.

Position Title: IAM (Identity and Access Management) Engineer

Business Unit: Information Security

Reports to: Manager of Security Access Management

Position Overview:

The IAM Engineer administers and engineers the Ping Identity platform to support secure, reliable, and scalable customer identity and user-management capabilities. This position serves as the Ping subject-matter expert, designs identity lifecycle and authentication processes, leads integrations, resolves complex platform issues, and prepares procedures, controls, monitoring, and training needed for phased operational support.

Primary Responsibilities:

Administers and supports Ping Identity organizations, environments, populations, directories, applications, groups, roles, authentication policies, and administrative configurations to maintain a secure, stable, and supportable customer identity platform.

Engineers customer identity lifecycle processes, including registration, identity creation, profile updates, verification, authentication enrollment, password reset, account recovery, suspension, reactivation, deactivation, and deletion, with appropriate validation and evidence.

Leads identity integration activities for applications connecting to Ping by documenting attributes, authentication requirements, roles, groups, provisioning, deprovisioning, logging, monitoring, ownership, support, and escalation requirements before production implementation.

Develops and maintains automated identity workflows, authoritative data mappings, APIs, scripts, exception handling, reconciliation, monitoring, recovery, and technical documentation to reduce manual administration and improve lifecycle reliability.

Investigates and resolves complex Ping platform, authentication, registration, lifecycle, role-assignment, integration, and data-quality issues, and coordinates incident response and root-cause remediation with security, application, infrastructure, vendor, and business partners.

Maintains least-privileged Ping administrative access, role definitions, custom roles, supporting approvals, access-review evidence, and segregation-of-duties controls, and escalates excessive access, unsupported exceptions, or unresolved ownership concerns.

Creates and maintains Ping architecture, configuration, support, troubleshooting, and customer user-management procedures, and trains Security Access Management analysts and backup administrators before routine production responsibilities are transitioned.

Plans, tests, documents, and validates Ping configuration changes, vendor releases, and platform enhancements through established Change Management processes, including implementation evidence, regression testing, rollback planning, and post-change verification.

Performs other related duties and projects as assigned.

All employees have the responsibility and the accountability to serve as risk managers for their businesses by understanding, reporting, responding to, managing and monitoring the risk they encounter daily as required by F.N.B. Corporation's risk management program.

F.N.B. Corporation is committed to achieving superior levels of compliance by adhering to regulatory laws and guidelines. Compliance with regulatory laws and company procedures is a required component of all position descriptions.

Minimum Level of Education Required to Perform the Primary Responsibilities of this Position:

BA or BS

Minimum # of Years of Job Related Experience Required to Perform the Primary Responsibilities of this Position:

5

Skills Required to Perform the Primary Responsibilities of this Position:

Excellent communication skills, both written and verbal

Excellent project management skills

Excellent organizational, analytical and interpersonal skills

Detail-oriented

Ability to work and multi-task in a fast paced environment

Ability to use a personal computer and job-related software

MS Excel - Intermediate Level

MS PowerPoint - Intermediate Level

Identity engineering, APIs, scripting, authentication, CIAM, troubleshooting, technical documentation, change control, Oauth/OIDC, SAML, MFA, Identity Federation, API Development and Integration & Cloud Identity Platforms

Licensures/Certifications Required to Perform the Primary Responsibilities of this Position:

Relevant Ping Identity, IAM, CIAM, cloud, Microsoft or information security certifications

Physical Requirements or Work Conditions Beyond Traditional Office Work:

N/A

Equal Employment Opportunity (EEO):

It is the policy of F.N.B. Corporation (FNB) and its affiliates not to discriminate against any employee or applicant for employment because of age, race, color, religion, sex, national origin, disability, veteran status or any other category protected by law. It is also the policy of FNB and its affiliates to employ and advance in employment all persons regardless of their status as individuals with disabilities or veterans, and to base all employment decisions only on valid job requirements. FNB provides all applicants and employees a discrimination and harassment free workplace.

FNB will not provide sponsorship for employment-based visas for this position; only candidates who are legally authorized to work in the U.S. will be considered.