IAM Engineer — Ping Identity & CIAM Specialist

eNGINE; Pittsburgh (Allegheny County); On-site; USD 110,000 - 140,000; Full time

Job summary

eNGINE, a solutions and placement firm, seeks an IAM Engineer to join our Pittsburgh team and support a financial services client. You will administer Ping Identity platforms (PingOne, PingFederate, PingAccess, PingID), build CIAM capabilities, and craft custom identity workflows for provisioning, authentication, and access management.

You will integrate apps using APIs, SSO, MFA, SAML, OAuth, and OpenID Connect; troubleshoot authentication issues, and collaborate with security and development

Qualifications

• Experience administering or engineering enterprise IAM or CIAM platforms.
• Hands-on experience with Ping Identity technologies such as PingOne, PingFederate, PingAccess, PingID, or ForgeRock preferred.
• Strong understanding of SSO, MFA, SAML, OAuth 2.0, OpenID Connect, and identity lifecycle management.
• Experience integrating applications with identity platforms and troubleshooting authentication issues.
• Familiarity with Microsoft Entra ID, Active Directory, LDAP, and access management principles.
• Understanding of role-based access control, least privilege, and identity governance.
• Strong troubleshooting, documentation, and communication skills.
• Experience working in financial services or another regulated environment is a plus.

Responsibilities

• Administer, configure, and support Ping Identity platforms, including PingOne and related technologies.
• Support the rollout and ongoing enhancement of Customer Identity and Access Management (CIAM) capabilities.
• Develop and maintain custom identity workflows for user provisioning, authentication, account recovery, and access management.
• Integrate enterprise applications with identity platforms using APIs, SSO, MFA, SAML, OAuth, and OpenID Connect.
• Troubleshoot authentication, authorization, provisioning, and platform‑related issues.
• Collaborate with security, infrastructure, and development teams to translate business requirements into technical IAM solutions.
• Develop scripts and automation to streamline identity management processes.
• Establish documentation, monitoring, and operational procedures to support long‑term platform stability.
• Support knowledge transfer and provide technical guidance to internal support teams.

Skills

Ping Identity

SSO

MFA

SAML

OAuth 2.0

OpenID Connect

CIAM

Identity lifecycle

Troubleshooting

Automation

Documentation

Communication

Tools

PingOne

PingFederate

PingAccess

PingID

ForgeRock

Microsoft Entra ID

Active Directory

LDAP

APIs

Job description

eNGINE, a solutions and placement firm, seeks an IAM Engineer to join our Pittsburgh team and support a financial services client. You will administer Ping Identity platforms (PingOne, PingFederate, PingAccess, PingID), build CIAM capabilities, and craft custom identity workflows for provisioning, authentication, and access management.

You will integrate apps using APIs, SSO, MFA, SAML, OAuth, and OpenID Connect; troubleshoot authentication issues, and collaborate with security and development