Ping Architect

Veriipro; Chicago (IL); On-site; USD 120,000 - 150,000; Full time

Job summary

Veriipro is seeking an experienced professional to own the architecture and technical roadmap for the Ping Identity platform, covering various deployment models. The role includes leading the design of Single Sign-On (SSO) solutions and governing Multi-Factor Authentication (MFA) policies.

The candidate will also define application integration standards and design frameworks for Identity Governance, contributing significantly to cloud and hybrid deployment strategies. This position will involve producing key architecture deliverables essential for management review.

Responsibilities

• Own the end-to-end architecture and technical roadmap for the Ping Identity platform.
• Lead the design and delivery of enterprise Single Sign-On (SSO) solutions.
• Architect and govern Multi-Factor Authentication (MFA) policies using PingID.
• Define and implement application integration standards for onboarding SaaS platforms.
• Design Identity Governance frameworks encompassing Role-Based Access Control (RBAC).
• Lead cloud and hybrid deployment strategies for PingOne and PingFederate.
• Produce and maintain architecture deliverables for management review.
• Embed Ping Identity as the identity control plane within the organisation’s zero-trust architecture.

Job description

• Own the end-to-end architecture and technical roadmap for the Ping Identity platform, covering PingFederate, PingAccess, PingDirectory, PingOne, PingAuthorize, and PingID across all deployment models.
• Lead the design and delivery of enterprise Single Sign-On (SSO) solutions using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation, ensuring seamless and secure authentication across all business applications.
• Architect and govern Multi-Factor Authentication (MFA) policies using PingID, including adaptive and risk-based step-up authentication, device trust, and phishing-resistant flows aligned with organisational risk appetite.
• Define and implement application integration standards for onboarding SaaS platforms (Salesforce, Workday, ServiceNow), cloud-native services, and legacy systems — using SAML connectors, OIDC flows, SCIM 2.0 provisioning, and REST APIs.
• Design Identity Governance frameworks encompassing Role-Based Access Control (RBAC), Attribute-Based Access Control (ABAC), user lifecycle management (joiner/mover/leaver), access certification, and entitlement reviews — integrated with IGA tools such as SailPoint or Saviynt where applicable.
• Lead cloud and hybrid deployment strategies for PingOne and PingFederate, including migration planning from on-premises to cloud, DaVinci no-code orchestration, and multi-region availability design.
• Produce and maintain architecture deliverables — High-Level Designs (HLD), Low-Level Designs (LLD), solution blueprints, and integration runbooks — to the standard required for management review and audit purposes.
• Embed Ping Identity as the identity control plane within the organisation’s zero-trust architecture, including continuous