IAM Engineer

First National Bank Of Pennsylvania; United States; On-site; USD 120,000 - 170,000; Full time

Job summary

First National Bank Of Pennsylvania seeks an IAM Engineer to administer Ping Identity environments and design secure authentication workflows for customers and users. You will act as the Ping SME, shaping lifecycle processes, integrations, and automated workflows to reduce manual tasks.

The role requires strong communication, collaboration with security and IT teams, and the ability to manage changes through formal processes while training analysts before production handoff.

Qualifications

• Bachelor's degree or higher in a related field.
• Proven experience engineering IAM/CIAM platforms.
• Strong knowledge of Ping Identity or equivalent identity platforms.

Responsibilities

• Administers Ping Identity environments, populations, and configurations to maintain a secure identity platform.
• Designs identity lifecycle processes including registration, verification, authentication enrollment, and lifecycle events.
• Leads integration activities for applications connecting to Ping and maintains APIs, scripts, and data mappings.
• Investigates complex platform issues, coordinates incident response, and applies root-cause remediation.

Skills

Identity engineering

APIs

Scripting

Authentication

CIAM

Troubleshooting

Technical documentation

OAuth/OIDC

SAML

MFA

Identity Federation

API Development

Cloud IAM

Education

Bachelor's degree

Job description

Primary Office Location: 626 Washington Place. Pittsburgh, Pennsylvania. 15219.

Position Title

IAM (Identity and Access Management) Engineer

Business Unit

Information Security

Reports to

Manager of Security Access Management

Position Overview

The IAM Engineer administers and engineers the Ping Identity platform to support secure, reliable, and scalable customer identity and user-management capabilities. This position serves as the Ping subject-matter expert, designs identity lifecycle and authentication processes, leads integrations, resolves complex platform issues, and prepares procedures, controls, monitoring, and training needed for phased operational support.

Primary Responsibilities

Administers and supports Ping Identity organizations, environments, populations, directories, applications, groups, roles, authentication policies, and administrative configurations to maintain a secure, stable, and supportable customer identity platform. Engineers customer identity lifecycle processes, including registration, identity creation, profile updates, verification, authentication enrollment, password reset, account recovery, suspension, reactivation, deactivation, and deletion, with appropriate validation and evidence. Leads identity integration activities for applications connecting to Ping by documenting attributes, authentication requirements, roles, groups, provisioning, deprovisioning, logging, monitoring, ownership, support, and escalation requirements before production implementation. Develops and maintains automated identity workflows, authoritative data mappings, APIs, scripts, exception handling, reconciliation, monitoring, recovery, and technical documentation to reduce manual administration and improve lifecycle reliability. Investigates and resolves complex Ping platform, authentication, registration, lifecycle, role-assignment, integration, and data-quality issues, and coordinates incident response and root-cause remediation with security, application, infrastructure, vendor, and business partners. Maintains least-privileged Ping administrative access, role definitions, custom roles, supporting approvals, access-review evidence, and segregation-of-duties controls, and escalates excessive access, unsupported exceptions, or unresolved ownership concerns. Creates and maintains Ping architecture, configuration, support, troubleshooting, and customer user‑management procedures, and trains Security Access Management analysts and backup administrators before routine production responsibilities are transitioned. Plans, tests, documents, and validates Ping configuration changes, vendor releases, and platform enhancements through established Change Management processes, including implementation evidence, regression testing, rollback planning, and post‑change verification. Performs other related duties and projects as assigned.

All employees have the responsibility and the accountability to serve as risk managers for their businesses by understanding, reporting, responding to, managing and monitoring the risk they encounter daily as required by F.N.B. Corporation’s risk management program.

F.N.B. Corporation is committed to achieving superior levels of compliance by adhering to regulatory laws and guidelines. Compliance with regulatory laws and company procedures is a required component of all position descriptions.

Minimum Level of Education

BA or BS

Minimum # of Years of Job Related Experience

5

Skills Required

Excellent communication skills, both written and verbal Excellent project management skills Excellent organizational, analytical and interpersonal skills Detail-oriented Ability to work and multi-task in a fast paced environment Ability to use a personal computer and job-related software MS Excel - Intermediate Level MS PowerPoint - Intermediate Level Identity engineering, APIs, scripting, authentication, CIAM, troubleshooting, technical documentation, change control, Oauth/OIDC, SAML, MFA, Identity Federation, API Development and Integration & Cloud Identity Platforms

Licensures/Certifications Required

Relevant Ping Identity, IAM, CIAM, cloud, Microsoft or information security certifications

Physical Requirements or Work Conditions Beyond Traditional Office Work

N/A

Equal Employment Opportunity (EEO)

It is the policy of F.N.B. Corporation (FNB) and its affiliates not to discriminate against any employee or applicant for employment because of age, race, color, religion, sex, national origin, disability, veteran status or any other category protected by law.

It is also the policy of FNB and its affiliates to employ and advance in employment all persons regardless of their status as individuals with disabilities or veterans, and to base all employment decisions only on valid job requirements.

FNB provides all applicants and employees a discrimination and harassment free workplace.

FNB will not provide sponsorship for employment-based visas for this position; only candidates who are legally authorized to work in the U.S. will be considered.

A culture of teamwork. A history of success. As a leading diversified financial services company, F.N.B. Corporation (FNB) offers a wide range of opportunities for individuals who want to grow their careers. The FNB team is a group of highly qualified professionals who work together to provide comprehensive financial solutions across our corporate footprint, which includes Pennsylvania, Ohio, Maryland, West Virginia, Virginia, North Carolina, and South Carolina. Our consistent recognition as a best place to work and top workplace by our own employees symbolizes the outstanding culture we represent.