Ping engineer

Tata Consultancy Services; Chicago (IL); On-site; USD 120,000 - 125,000; Full time

Benefits offered by this job

Discretionary Annual Incentive

Comprehensive Medical Coverage

Family Leave

Identity Theft Protection

Commuter Benefits

Certification & Training Reimbursement

Vacation & Holidays

401K Plan

Performance Bonus

Job summary

Tata Consultancy Services in Chicago seeks an experienced Ping Identity Engineer to design, implement, and support enterprise IAM solutions using PingFederate, PingAccess, and PingDirectory. You will configure SSO, federation, OAuth/OIDC, and MFA across SaaS, cloud, and on‑prem apps.

Ideal candidates bring deep Ping Identity experience, directory services expertise, and familiarity with regulated industries. Strong collaboration with security and DevOps teams is essential.

Qualifications

• Experience designing and implementing Ping Identity IAM in large enterprises.
• Strong knowledge of SSO, MFA, OAuth/OIDC and directory services.
• Experience with BFSI or regulated environments preferred.
• Familiarity with cloud and on‑premises integrations.

Responsibilities

• Design and implement enterprise authentication and authorization using PingFederate, PingAccess, and PingDirectory.
• Configure and maintain SSO integrations for SaaS, cloud, and on‑premises apps.
• Implement federation between internal and external identity providers.
• Configure OAuth and OIDC authentication flows.
• Integrate new applications with Ping Identity platforms.
• Configure SAML, OAuth, and OIDC connections.
• Support API security and token‑based authentication mechanisms.
• Design authentication policies and access control frameworks.
• Implement MFA and adaptive authentication controls.
• Configure RBAC aligned with least privilege.
• Troubleshoot authentication, federation, and access issues.
• Monitor Ping platform health and performance.
• Perform upgrades, patching, and maintenance.
• Support production incidents and root cause analysis.
• Ensure security standards and compliance, and support audits.
• Develop and maintain documentation, SOPs, and diagrams.

Skills

PingFederate

PingAccess

PingDirectory

PingID

PingOne

PingDataSync

SAML 2.0

OAuth 2.0

OpenID Connect

SCIM

JWT

LDAP

Active Directory

Azure AD

SSO

MFA

Adaptive Authentication

Authorization & Access Policies

Zero Trust

Linux/Unix

Windows Server

Apache/Nginx

REST APIs

Java

Groovy

PowerShell

Python

Kubernetes

Docker

Splunk

Dynatrace

Bachelor of Computer Science

Ping Identity Certified Professional

PingFederate Administrator Certificate

Security+

CISSP

Microsoft Identity & Access Admin

Java

Education

Bachelor of Computer Science

Tools

Kubernetes

Docker

Splunk

Dynatrace

Ping Identity Certified Professional

PingFederate Administrator Certification

Security+

CISSP

Microsoft Identity & Access Administrator

Job description

• Linux/Unix

Job Description

Job Summary

We are seeking an experienced Ping Identity Engineer to design, implement, support, and optimize enterprise Identity and Access Management (IAM) solutions using the Ping Identity suite. The ideal candidate will possess strong expertise in SSO, Federation, MFA, API security, and directory services, with experience supporting large-scale enterprise or BFSI environments.

Mandatory Skills

Ping Identity Technologies

• PingFederate
• PingAccess
• PingDirectory
• PingID
• PingOne (good to have)
• PingDataSync (good to have) Authentication & Federation
• SAML 2.0
• OAuth 2.0
• OpenID Connect (OIDC)
• SCIM
• JWT
• FIDO2 Directory Services
• LDAP
• Microsoft Active Directory
• Azure AD / Microsoft Entra ID Security
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Adaptive Authentication
• Authorization & Access Policies
• Zero Trust Concepts Platforms
• Linux/Unix
• Windows Server
• Apache / NGINX / Web Servers
• REST APIs

Roles & Responsibilities

Key Responsibilities

Engineering & Implementation

• Design and implement enterprise authentication and authorization solutions using PingFederate, PingAccess, and PingDirectory.
• Configure and maintain SSO integrations for SaaS, cloud, and on-premises applications.
• Implement federation between internal and external identity providers.
• Configure OAuth and OIDC-based authentication flows.

Application Onboarding

• Integrate new applications with Ping Identity platforms.
• Configure SAML, OAuth, and OIDC connections.
• Support API security and token-based authentication mechanisms.

Access Management

• Design authentication policies and access control frameworks.
• Implement MFA and adaptive authentication controls.
• Configure role-based access controls aligned with least privilege principles.

Operations & Support

• Troubleshoot authentication, federation, and access-related issues.
• Monitor Ping platform health and performance.
• Perform upgrades, patching, and platform maintenance activities.
• Support production incidents and root cause analysis.

Security & Compliance

• Ensure adherence to security standards and compliance requirements.
• Support audit activities and access reviews.
• Develop and maintain technical documentation, SOPs, and architecture diagrams.

Preferred Qualifications

• Experience in BFSI, Healthcare, or other regulated industries.
• Experience with Okta, Entra ID, ForgeRock, Saviynt, or SailPoint.
• Knowledge of CI/CD pipelines and DevOps practices.
• Experience with Splunk , Dynatrace, or enterprise monitoring tools.
• Understanding of PAM, IGA, and CIAM concepts.

Certifications (Preferred)

• Ping Identity Certified Professional
• PingFederate Administrator Certification
• Security+
• CISSP
• Microsoft Identity & Access Administrator

Nice-to-Have Skills

• Java, Groovy, PowerShell, Python
• Kubernetes and Docker
• API Gateway Security
• Cloud IAM (Azure, AWS, GCP)
• LDAP Directory Performance Tuning BFSI-Specific Expectations
• Strong understanding of regulatory compliance and identity governance.
• Experience implementing secure customer and workforce authentication.
• Ability to support high-availability authentication platforms with minimal downtime.
• Experience handling security audits and access certification requirements.

TCS Employee Benefits Summary

Discretionary Annual Incentive.

Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.

Family Support: Maternal & Parental Leaves.

Insurance Options: Auto & Home Insurance, Identity Theft Protection.

Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.

Time Off: Vacation, Time Off, Sick Leave & Holidays.

Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Salary Range: $120,000 - $125,000 a year

Qualifications:

BACHELOR OF COMPUTER SCIENCE