Ping Directory Lead SME

Entech; Malvern (Chester County); On-site; USD 180,000 - 210,000; Full time

Benefits offered by this job

Health

Dental

Vision

401(k)

20 days PTO

Job summary

Entech is seeking a Ping Directory Lead SME to own enterprise directory strategy and platform lifecycle. You will drive deployment, modernization, and day-to-day resilience of Ping Directory ecosystem, including AD migrations, IaC, and zero-trust security controls.

This hybrid role requires onsite work in Malvern, PA, and serves as escalation point for production engineering and reliability teams.

Qualifications

• Enterprise directory mastery with scale-focused experience.
• Proven LDAP/Active Directory migration leadership.
• Cross-functional collaboration across IAM, Cybersecurity, Infra, Cloud, Audit.
• Bachelor’s degree in CS/Engineering; Ping certs or cloud certs desirable.

Responsibilities

• Platform Ownership & Strategy: lead Ping Directory, PingDirectoryProxy, PingDataSync strategy and lifecycle.
• Architecture & Deployment: design HA directory environments, manage schema, access, replication and sync.
• Migration Leadership: guide AD migrations including mapping, coexistence, cutover, validation, rollback.
• IaC & Automation: automate infra with Terraform, GitOps, Kubernetes, and CI/CD pipelines.
• Enterprise Integrations: connect Ping Directory to cloud, IdPs, PAM, LDAP/REST/SCIM.
• Security & Compliance: enforce least privilege, secure protocols, SIEM integration and audit trails.
• Operational Resilience & Performance: capacity planning, JVM tuning, backups, DR tests, patching.
• Production Engineering & Incident Response: on-call leadership, RCA, optimization, remediation.
• Governance & Knowledge Management: maintain blueprints, runbooks, change control, data integrity.

Skills

Leadership

IAM

Directory mastery

Cloud & Security

Education

Bachelor’s degree in CS / Engineering

Ping Identity certifications desirable

Tools

Ping Directory

PingDirectoryProxy

PingDataSync

AD migrations

Terraform

Kubernetes

GitOps

CI/CD

AWS

LDAP/LDAPS

JVM tuning

Splunk

Job description

Going digital requires holistic thinking that puts humans at the center of everything. Entech delivers complete solutions including strategies, technologies, and implementation services to master digital convergence. We integrate our unique outside-in approach to people, processes, and technology to orchestrate digital empowerment to address today's business challenges. Mastering digital convergence at enterprise scale.

Entech is hiring a Ping Directory Lead SME to take full technical ownership of the enterprise directory strategy, architecture, and platform lifecycle. In this role, you will lead the deployment, modernization, and day-to-day resilience of our Ping Directory ecosystem—including PingDirectoryProxy and PingDataSync. You will drive Active Directory (AD) migrations, automate cloud infrastructure, enforce stringent zero-trust security controls, and serve as the ultimate escalation point for production engineering and reliability.

This is a Hybrid role that involves working onsite in Malvern, Pennsylvania

Key Responsibilities

• Platform Ownership & Strategy: Lead the overarching technical strategy, engineering standards, and lifecycle management for Ping Directory, PingDirectoryProxy, and PingDataSync.
• Architecture & Deployment: Architect and deploy high-availability directory environments, managing schema design, indexing, access controls, replication topologies, and synchronization mechanisms.
• Migration Leadership: Direct enterprise Active Directory (AD) migrations, including application dependency discovery, data mapping, coexistence strategies, cutover execution, validation, and rollback planning.
• Infrastructure as Code (IaC) & Automation: Automate platform infrastructure and configurations utilizing Terraform, GitOps workflows, Kubernetes patterns, and automated CI/CD pipelines.
• Enterprise Integrations: Seamlessly integrate Ping Directory with cloud platforms, identity providers (IdPs), privileged access management (PAM) solutions, and LDAP, REST, or SCIM consumers.
• Security & Compliance: Enforce least-privilege access, secure LDAP/replication protocols, non-human identity controls, audit logging, SIEM integrations, and audit evidence collection.
• Operational Resilience & Performance: Oversee capacity planning, JVM tuning, backup/restore, disaster recovery (DR) testing, OS patching, upgrades, and automated failover validation.
• Production Engineering & Incident Response: Serve as senior escalation lead for critical incidents, providing root-cause analysis (RCA), performance optimization, and preventive remediation. Participate in on-call rotations for critical events and releases.
• Governance & Knowledge Management: Maintain high-standard architectural blueprints, implementation guides, runbooks, and recovery procedures while governing production change control and data integrity.

Qualifications

• Enterprise Directory Mastery: Deep experience architecting, modernizing, and maintaining business-critical enterprise directory platforms at scale.
• Proven Migration Track Record: Demonstrated success leading large-scale LDAP or Active Directory migration projects from discovery through cutover.
• Cross-Functional Leadership: Strong leadership presence with the ability to influence and collaborate across IAM, Cybersecurity, Infrastructure, Cloud, and Audit teams.
• Education & Certifications: Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or equivalent practical experience. Relevant Ping Identity (e.g., PingDirectory Certified Professional) or Cloud certifications are highly desirable.
• Directory Ecosystems: Ping Directory, PingDirectoryProxy, PingDataSync, Active Directory, LDAP/LDAPS, Directory Information Trees (DIT), schema extensions, indexing, password policies, and virtual attributes.
• Cloud & Automation: AWS (or equivalent cloud), Kubernetes, Terraform, Git, CI/CD pipelines, Secrets Management, and SSL/TLS Certificate Lifecycle Automation.
• Identity & Security Integrations: Okta, Microsoft Entra ID, PingFederate, REST APIs, SCIM, Identity Lifecycle Management, and Privileged Access Management (PAM).
• Engineering & Observability: Linux administration, Java Virtual Machine (JVM) tuning, Python/PowerShell/Shell scripting, Splunk (or similar SIEM/observability tools), backup/restore tools, and capacity planning frameworks.

Company Benefits

(Can includes) Health, Dental, Vision, 401(k), 20 days of Paid Time Off (PTO)

Preference: W2

Additionally

• Entech is an equal-opportunity employer.
• This is an On-site role work schedule based out of Malvern, PA office five days on week
• No Third-party candidates will be accepted, this is strictly a direct employment opportunity with Entech