IAM Engineer

F.N.B. Corporation; Pittsburgh (Allegheny County); On-site; USD 100,000 - 150,000; Full time

Job summary

F.N.B. Corporation is seeking an IAM Engineer to administer and engineer the Ping Identity platform, supporting secure user management and identity lifecycle automation.

This role resides in the Information Security unit and reports to the Manager of Security Access Management. You will design authentication workflows, lead integration efforts, and implement change-controlled enhancements while ensuring least-privileged access and strong incident response coordination across security,

Qualifications

• BA or BS degree
• 5+ years of related IAM/security experience
• Experience administering Ping Identity or similar IAM platforms
• Strong communication and project-management skills
• Ability to design, implement and document identity lifecycle processes
• Knowledge of authentication protocols (OAuth/OIDC, SAML) and access controls

Responsibilities

• Administers and supports Ping Identity environments, users, and configurations to maintain a secure customer identity platform.
• Designs identity lifecycle processes, including registration, authentication enrollment, password management, and lifecycle events.
• Leads integration activities for applications connecting to Ping with documented requirements and ownership.
• Develops automated identity workflows, data mappings, APIs, and monitoring to improve reliability.
• Investigates complex platform issues and coordinates incident response with security and business partners.
• Maintains least-privilege access controls and evidence for access reviews and approvals.

Skills

Excellent communication

Project management

Analytical skills

Detail-oriented

Multi-tasking

MS Excel

MS PowerPoint

Identity engineering

APIs and scripting

Education

BA or BS

Tools

Ping Identity

CIAM

OAuth/OIDC

SAML

Job description

Primary Office Location:

626 Washington Place. Pittsburgh, Pennsylvania. 15219.

Join our team. Make a difference - for us and for your future.

Position Title: IAM (Identity and Access Management) Engineer

Business Unit: Information Security

Reports to: Manager of Security Access Management

Position Overview

The IAM Engineer administers and engineers the Ping Identity platform to support secure, reliable, and scalable customer identity and user-management capabilities. This position serves as the Ping subject-matter expert, designs identity lifecycle and authentication processes, leads integrations, resolves complex platform issues, and prepares procedures, controls, monitoring, and training needed for phased operational support.

Primary Responsibilities

• Administers and supports Ping Identity organizations, environments, populations, directories, applications, groups, roles, authentication policies, and administrative configurations to maintain a secure, stable, and supportable customer identity platform.
• Engineers customer identity lifecycle processes, including registration, identity creation, profile updates, verification, authentication enrollment, password reset, account recovery, suspension, reactivation, deactivation, and deletion, with appropriate validation and evidence.
• Leads identity integration activities for applications connecting to Ping by documenting attributes, authentication requirements, roles, groups, provisioning, deprovisioning, logging, monitoring, ownership, support, and escalation requirements before production implementation.
• Develops and maintains automated identity workflows, authoritative data mappings, APIs, scripts, exception handling, reconciliation, monitoring, recovery, and technical documentation to reduce manual administration and improve lifecycle reliability.
• Investigates and resolves complex Ping platform, authentication, registration, lifecycle, role-assignment, integration, and data-quality issues, and coordinates incident response and root-cause remediation with security, application, infrastructure, vendor, and business partners.
• Maintains least-privileged Ping administrative access, role definitions, custom roles, supporting approvals, access-review evidence, and segregation-of-duties controls, and escalates excessive access, unsupported exceptions, or unresolved ownership concerns.
• Creates and maintains Ping architecture, configuration, support, troubleshooting, and customer user-management procedures, and trains Security Access Management analysts and backup administrators before routine production responsibilities are transitioned.
• Plans, tests, documents, and validates Ping configuration changes, vendor releases, and platform enhancements through established Change Management processes, including implementation evidence, regression testing, rollback planning, and post-change verification.
• Performs other related duties and projects as assigned.

All employees have the responsibility and the accountability to serve as risk managers for their businesses by understanding, reporting, responding to, managing and monitoring the risk they encounter daily as required by F.N.B. Corporation’s risk management program.

F.N.B. Corporation is committed to achieving superior levels of compliance by adhering to regulatory laws and guidelines. Compliance with regulatory laws and company procedures is a required component of all position descriptions.

Minimum Level of Education Required to Perform the Primary Responsibilities of this Position

BA or BS

Minimum # of Years of Job Related Experience Required to Perform the Primary Responsibilities of this Position

5

Skills Required to Perform the Primary Responsibilities of this Position

• Excellent communication skills, both written and verbal
• Excellent project management skills
• Excellent organizational, analytical and interpersonal skills
• Detail-oriented
• Ability to work and multi-task in a fast paced environment
• Ability to use a personal computer and job-related software
• MS Excel - Intermediate Level
• MS PowerPoint - Intermediate Level
• Identity engineering, APIs, scripting, authentication, CIAM, troubleshooting, technical documentation, change control, Oauth/OIDC, SAML, MFA, Identity Federation, API Development and Integration & Cloud Identity Platforms

Licensures/Certifications Required to Perform the Primary Responsibilities of this Position

Relevant Ping Identity, IAM, CIAM, cloud, Microsoft or information security certifications

Physical Requirements Or Work Conditions Beyond Traditional Office Work

N/A

Equal Employment Opportunity (EEO)

It is the policy of F.N.B. Corporation (FNB) and its affiliates not to discriminate against any employee or applicant for employment because of age, race, color, religion, sex, national origin, disability, veteran status or any other category protected by law. It is also the policy of FNB and its affiliates to employ and advance in employment all persons regardless of their status as individuals with disabilities or veterans, and to base all employment decisions only on valid job requirements. FNB provides all applicants and employees a discrimination and harassment free workplace.

FNB will not provide sponsorship for employment-based visas for this position; only candidates who are legally authorized to work in the U.S. will be considered.