Lead LDAP Engineer (Ping Directory)

MethodHub; Malvern (Chester County); On-site; USD 140,000 - 190,000; Full time

Job summary

MethodHub seeks an expert-level engineer to own Ping Directory migrations and platform lifecycle for a financial-grade environment.

Responsibilities include leading Ping Directory deployments, LDAP security, and integration with identity providers, cloud services, and SCIM/REST. You will automate infra with Terraform and Git, and support on-call incident response.

Qualifications

• Bachelor’s degree in computer science, engineering, cybersecurity, or equivalent practical experience.
• Experience delivering Ping Directory implementations or large LDAP/AD migrations.
• Strong command of directory architecture, replication, security, and recovery.

Responsibilities

• Own Ping Directory technical strategy, engineering standards, and platform lifecycle.
• Lead architecture and deployment of Ping Directory, PingDirectoryProxy, and PingDataSync, including schema and access controls.
• Automate infrastructure and configuration via Terraform, Git, cloud/Kubernetes patterns, and CI/CD.
• Direct Active Directory migration, including data mapping, coexistence, cutover, validation, and rollback.
• Integrate Ping Directory with identity providers, cloud platforms, and SCIM/REST consumers.
• Engineer resilience and performance through capacity planning, backup/recovery, DR testing, upgrades, and failover validation.
• Enforce least privilege, secure LDAP and replication, privileged/non-human identity controls, and audit logging.
• Provide senior-level production engineering, incident leadership, root-cause analysis, and performance tuning.
• Govern production changes, service validation, data integrity, backout readiness, and continuous reliability improvement.
• Maintain architecture standards, runbooks, and recovery procedures; support on-call for critical incidents.

Skills

IAM leadership

Architecture direction

Security

Cloud strategy

Automation

Education

Bachelor’s degree in CS/Engineering or equivalent

Tools

Ping Directory

PingDirectoryProxy

PingDataSync

LDAP/LDAPS

AWS

Kubernetes

Terraform

Git & CI/CD

Job description

We are seeking an expert+ candidate with hands-on experience migrating AD to Ping Directory for a medium- to large financial organization.

Responsibilities

• Own Ping Directory technical strategy, engineering standards, and platform lifecycle.
• Lead architecture and deployment of Ping Directory, PingDirectoryProxy, and PingDataSync, including schema, indexing, access controls, replication, synchronization, and high availability.
• Automate infrastructure and configuration through Terraform, Git-based controls, cloud or Kubernetes patterns, and CI/CD pipelines.
• Direct Active Directory (AD) migration, including dependency discovery, data mapping, coexistence, cutover, validation, and rollback.
• Integrate Ping Directory with identity providers, cloud platforms, privileged access services, and LDAP, REST, or SCIM consumers.
• Engineer resilience and performance through capacity planning, monitoring, backup and recovery, disaster-recovery testing, patching, upgrades, and failover validation.
• Enforce least privilege, secure LDAP and replication, privileged and non-human identity controls, audit logging, SIEM integration, and compliance evidence.
• Provide senior-level production engineering, incident leadership, root-cause analysis, performance tuning, and preventive remediation.
• Govern production changes, service validation, data integrity, backout readiness, and continuous reliability improvement.
• Maintain architecture standards, implementation guides, runbooks, recovery procedures, and operational knowledge.
• Participate in on-call support for critical incidents, releases, failover events, and recovery exercises.

Qualifications

Ping Directory Platform experience

• Extensive enterprise directory engineering experience, including senior ownership of highly available, business-critical platforms.
• Proven delivery of Ping Directory implementations, platform modernization, or large-scale LDAP and Active Directory migrations.
• Strong command of directory architecture, schema design, replication, synchronization, security, performance, and recovery.
• Demonstrated leadership across IAM, security, cloud, infrastructure, application, vendor, and audit stakeholders.
• Bachelor’s degree in computer science, engineering, cybersecurity, or equivalent practical experience; relevant Ping or cloud certifications preferred.

Technical Skills

• Directory platforms: Ping Directory, PingDirectoryProxy, PingDataSync, Active Directory, LDAP/LDAPS, directory information trees, schema, indexes, access controls, password policies, replication, and virtual attributes.
• Cloud and automation: AWS or equivalent cloud infrastructure, Kubernetes, Terraform, Git, CI/CD, infrastructure as code, secrets management, and certificate automation.
• Identity integrations: Okta, Microsoft Entra ID, PingFederate, REST APIs, SCIM, identity lifecycle management, and privileged access management.
• Engineering and operations: Linux, Java Virtual Machine tuning, Python, PowerShell or shell scripting, Splunk or equivalent observability, backup and restore, disaster recovery, capacity planning, and incident management.