Lead IAM Architect / Ping Directory Lead SME (Active Directory Migration)

BrezQ; Malvern (Chester County); Hybrid; USD 160,000 - 210,000; Full time

Job summary

BrezQ is seeking an Expert+ IAM Architect to lead a mission-critical directory services modernization in Malvern, PA. You will own end-to-end architecture, automation, and live migration from AD to Ping Directory across a highly resilient enterprise ecosystem.

The role requires hands-on Ping Directory and PingDataSync expertise, plus experience with AWS, Terraform, Kubernetes, and scripting. You will drive secure, auditable IAM integrations with IdPs and CI/CD pipelines.

Qualifications

• 8+ years in Enterprise Identity & Directory Services (LDAP/AD).
• Hands-on mastery of Ping Directory, PingDirectoryProxy, and PingDataSync.
• Proven track record leading large-scale Active Directory migration or modernization programs.
• Deep expertise in Cloud Infrastructure (AWS), Terraform, Kubernetes, and scripting (Bash/Python/PowerShell).
• Strong understanding of directory security, schema design, index optimization, and JVM tuning.

Responsibilities

• Lead technical strategy, architecture, and deployment of Ping Directory, PingDirectoryProxy, and PingDataSync.
• Direct complex AD-to-Ping migrations—including schema mapping, coexistence, cutover validation, and rollback strategies.
• Automate infrastructure and deployments using Terraform, GitOps, Kubernetes, and CI/CD pipelines.
• Optimize platform resilience via JVM tuning, high availability (HA) design, backup/DR testing, and performance monitoring.
• Integrate directory services with major IdPs (Entra ID, Okta, PingFederate), PAM platforms, and REST/SCIM endpoints.
• Enforce strict security, audit logging, least-privilege access, and SIEM integration for financial compliance.

Skills

LDAP/AD

Ping Directory

PingDirectoryProxy

PingDataSync

AWS

Terraform

Kubernetes

Bash scripting

Python scripting

PowerShell scripting

CI/CD pipelines

Security & SIEM

Tools

GitOps

Job description

We are Hiring: Lead IAM Architect / Ping Directory Lead SME (Active Directory Migration)

Job Title: Lead IAM Architect / Ping Directory Lead SME (Active Directory Migration)

Location: Malvern, PA. Hybrid role (3 day/week)

Duration: 12+ Months

We are seeking an Expert+ Directory Services SME to lead a mission-critical platform modernization initiative. In this role, you will own the end-to-end architecture, automation, and live migration from Active Directory (AD) to Ping Directory across a highly resilient enterprise ecosystem.

Key Responsibilities:

• Lead technical strategy, architecture, and deployment of Ping Directory, PingDirectoryProxy, and PingDataSync.
• Direct complex AD-to-Ping migrations—including schema mapping, coexistence, cutover validation, and rollback strategies.
• Automate infrastructure and deployments using Terraform, GitOps, Kubernetes, and CI/CD pipelines.
• Optimize platform resilience via JVM tuning, high availability (HA) design, backup/DR testing, and performance monitoring.
• Integrate directory services with major IdPs (Entra ID, Okta, PingFederate), PAM platforms, and REST/SCIM endpoints.
• Enforce strict security, audit logging, least-privilege access, and SIEM integration for financial compliance.

Must-Have Qualifications:

• 8+ years in Enterprise Identity & Directory Services (LDAP/AD).
• Hands-on mastery of Ping Directory, PingDirectoryProxy, and PingDataSync.
• Proven track record leading large-scale Active Directory (AD) migration or modernization programs.
• Deep expertise in Cloud Infrastructure (AWS), Terraform, Kubernetes, and scripting (Bash/Python/PowerShell).
• Strong understanding of directory security, schema design, index optimization, and JVM tuning.