IAM Software Engineer

Reply; Chicago (IL); On-site; USD 100,000 - 130,000; Full time

Job summary

Reply is seeking a Software Engineer focusing on Identity & Access Management (IAM) solutions in Chicago, Illinois. Ideal candidates will have over 3 years of experience in software engineering with a focus on Ping Identity solutions, REST APIs, and have experience in No Code / Low Code platforms.

This full-time position offers a base compensation range of $100,000 - $130,000 annually, commensurate with skills and experience. Reply is committed to diversity and equal opportunity.

Qualifications

• 3+ years’ experience in software engineering, IAM engineering, or API platform architecture.
• Experience with No Code / Low Code workflow development platforms.
• Knowledge of identity protocols including SAML, OAuth 2.0, OIDC.

Responsibilities

• Collaborate with cloud and security teams to ensure reliable orchestration.
• Implement and maintain Ping Identity solutions for SSO and MFA.
• Utilize Ping REST APIs and scripting to automate operational tasks.

Skills

Software engineering

IAM engineering

API platform architecture

Ping Identity solutions

RESTful APIs

Scripting in Python

Low-code development

Tools

PingFederate

PingAccess

PingOne

Postman Tool

Job description

Responsibilities

• Collaborate with infrastructure, cloud, and security teams to ensure reliable orchestration at scale
• Implement and maintain Ping Identity solutions for seamless SSO, MFA, and adaptive authentication.
• Develop and maintain authentication policies, selectors, and adapters to support complex user journeys.
• Leverage PingOne DaVinci to orchestrate low-code identity workflows and integrate third-party security services.
• Utilize Ping REST APIs and scripting (e.g., Python, Bash) to automate operational tasks, monitoring, and administrative functions.
• Support Joiner‑Mover‑Leaver (JML) processes by integrating Ping stack components with upstream identity sources and downstream SPs.
• Collaborate with App Owners and Security teams to migrate legacy applications to modern protocols (OIDC/OAuth 2.0/SAML2.0/SCIM).
• Troubleshoot complex authentication issues, latent LDAP queries, and synchronization errors across the Ping ecosystem.
• Create and maintain technical documentation, architecture diagrams, and automated operational run books.

Minimum Requirements

• 3+ years’ experience in software engineering, IAM engineering, or API platform architecture
• Experience working in “No Code / Low Code” workflow development platform.
• Hands‑on experience with the Ping Identity platform, including PingFederate, PingAccess, PingDirectory, and/or PingOne
• Knowledge of identity protocols including SAML, OAuth 2.0, OIDC
• Proficiency in RESTful APIs, JSON, and Postman Tool.
• Scripting ability in Bash, PowerShell, Python, or similar

Preferred Qualifications

• Deep understanding of LDAP best practices, specifically with Ping Directory.
• Experience in a DevOps environment, treating "Identity as Code" through configuration automation and CI/CD pipelines.
• Strong working knowledge of JavaScript for custom business logic implementation
• Advanced use of JSON for IAM related workflow payloads, REST API integrations, and event handling
• Basic proficiency with HTML and CSS for custom UI, branding, and hosted page integration
• Proven experience with Identity Orchestration and modernizing authentication flows (PingOne DaVinci experience is a plus).
• Certifications in Ping Identity, or major IAM platforms

Benefits

The base compensation range for this full‑time position is between [$100,000 - $130,000] plus benefits. Compensation decisions are supported through market data, where regional variances may exist based on cost of labor. We also take into consideration prior experience, relevant skills, education and/or training, certifications and, as applicable, other required qualifications.

Reply is an equal opportunity employer. We are committed to provide equal opportunity regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity or Veteran status. If you need assistance and reasonable accommodation due to a disability during the application or the recruiting process, email us at [e-mail]. Visit our website at www.reply.com to learn more about our open roles.