Ping Engineer

Mondelez International; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Mondelēz International is seeking an IAM expert to lead complex PingFederate, PingID MFA, and Ping Directory operations, design SSO integrations, and guide vendor collaborations. You will troubleshoot high-severity incidents, oversee migrations, and ensure security compliance across enterprise applications.

The role requires strong communication, stakeholder influence, and hands-on scripting or programming for automation, with a focus on reliability and security.

Qualifications

• 8–12+ years in IAM / Identity & Access Management.
• Minimum 5 years knowledge and experience with Ping Federate, Ping MFA, Ping Directory and components.
• Strong understanding of SSO concepts, MFA concepts and Directory services.

Responsibilities

• Act as SME for PingFederate, PingID MFA, Ping Directory and lead complex integrations.
• Design and maintain SAML, OAuth, and OIDC integrations for SSO across systems.
• Coordinate with vendor and internal teams for deployments, upgrades, and incident responses.

Skills

IAM

Vendor management

Project management

Stakeholder management

Security concepts

Tools

PingFederate

PingID MFA

Ping Directory

OAuth 2.0

SAML

Job description

Job DescriptionAre You Ready to Make It Happen at Mondelēz International?Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.You provide software and application knowledge to support implementation of the given solutions.How you will contributeYou will ensure that delivered services are optimized to meet business demands and the service operations strategy, plan, measure, report and communicate service improvement initiatives, and serve as a consultant on issues and resolutions. You will also recommend actions that can be taken to optimize investments and benefits and to mitigate risks. This role will require you to identify suppliers, evaluate them, on-board new vendors, establish and run vendor governance; collaborate with management and follow-up on requisitions, purchase orders, invoices, and payments; work with project resources to provide design collateral and to configure software components so they are aligned with security policy and governance; and ensure adherence to development and configuration standards and processes.What you will bringA desire to drive your future and accelerate your career. You will bring experience and knowledge in:Working collaboratively with multiple vendorsLeading complex projects - project managementStakeholder management and influencing skillsManaging infrastructure services delivery, support and excellenceWorking in global IT function with regional or global responsibilities in an environment like Mondelēz InternationalWorking with IT outsourcing providers using frameworks such as the IT Infrastructure LibraryWorking with internal and external teams and leading when necessaryJob DescriptionAct as subject matter expert (SME) for PingFederate, PingID MFA, Ping Directory. Lead complex application integrations and legacy migrations. Provide technical leadership during major incidents.Perform the day-to-day Ping Federate, PingID MFA and Ping Directory technical operations and task execution.Design and maintain SAML, oAuth, and OIDC integrations to provide SSO capabilities across various enterprise systems. Support new application onboarding (SAML/OIDC integrations). Sample tasks includeModify and maintain SP/IdP connections, Adapters (HTML Form, LDAP, MFA, Kerberos, etc.), Authentication policies and contract mappings,Certificate management (Signing/encryption certificate rotation, Trust store updates)User attribute and claim mapping validation.Troubleshoot critical, high-severity incidents impacting enterprise SSO and authentication.Monitor, identify, and troubleshoot SSO, MFA, Ping Directory related issues to ensure the integrity and availability of the Single Sign On, and Directory services. Sample tasks includeHandling escalated incidents from L2 related to PingFederate (SSO failures, authentication errors, federation issues).Perform in-depth troubleshooting of SAML, OAuth 2.0, OIDC, WS-Fed issues.Analyze JVM behavior, thread dumps, heap dumps, and performance bottlenecks.Analyze PingFederate logs, audit logs, and system metrics to identify root causes.Coordinate with vendor (Ping Identity) for product defects or complex issues.Collaborate with application and IT teams to integrate SSO with core enterprise applications ensuring secure and user-friendly access.Provide technical support for SSO-MFA services, Ping Directory troubleshooting authentication failures, and resolving access issues across applications and platforms. Sample tasks includeMonitor PingFederate, PingID MFA, Ping Directory services availability and performance.Support HA/DR environments (clusters, load balancers).Restart services and apply approved configuration changes.Assist with PingFederate upgrades and patching (pre/post validation).Implement and customize Authentication policies and selectors, Custom adapters and adapter instancesDesign advanced OAuth flows: Token exchange, Fine-grained scopes, JWT customizationHelp drive continuous quality and process improvement within your area.Explore automations to automate regular operations tasksMentor junior team members, helping train them on new systems and concepts.Present security concepts, technologies and improvement plans to broad audience groups.Help team members to determine security requirements for business processes and technology systems based upon accepted risk analysis methods, functional and performance requirements, information security architecture principles, and market-leading solutions.Support the team in the creation, tracking, and completion of any compliance findings related to identity and access management.Prioritize and balance workload based on severity, and deadline for the team.Make risk-based decisions/recommendations when deviations from standards are required, including recommendations on compensating controls.Troubleshoot and fix production issues and incidents and participate in problem and change management forums.Identify recurring issues and perform root cause analysis (RCA).Propose permanent fixes and preventive measures.Create and update knowledge base (KB) articles for L1 / L2 teams.Investigate security incidents, suspicious authentication behavior.Ensure configurations align with security standards and compliance requirements.Participate in access reviews and audit evidence collection.Work with Application teams, Network and infrastructure teams, Security and compliance teamsParticipate in change management (CAB) and release planning.Drive accountability and SLA/OLA adherence with the vendors contracted to provide support.Support Major PingFederate upgrades, Hotfixes and emergency patchesDefine monitoring and alerting standards (logs, metrics).Maintain technical documentation:Architecture diagramsIntegration guidesSOPs and runbooksMore about this roleWhat you need to know about this position:Skills and Qualifications8–12+ years in IAM / Identity & Access ManagementMinimum 5 years knowledge and experience working with and implementing Ping Federate, Ping MFA, Ping Directory, and its constituent components.Excellent technical thought leadership, hands on experience and implementation skills on Ping Federate and Ping MFA.Prefer knowledge, and hands on experience in one or more of the following - Active Directory, Azure AD/Microsoft Entra IDStrong understanding of SSO concepts, MFA concepts and Directory services (e.g., Active Directory, LDAP).Good understanding of certificate lifecycle management concepts, SSL/TLS and certificate handlingExpertise in IAM tools and frameworks (e.g., SAML, OAuth, OpenID Connect, SCIM).Proficiency in scripting and programming (e.g., PowerShell, Java, C#) for automation and integration.Knowledge of cloud IAM (e.g., Azure AD, AWS IAM, Google Cloud Platform).Experience of waterfall, Agile and DevSecOps methodologies and ITIL practicesExcellent communication skills (both written and verbal) with strong presentation and facilitation skills.Strong interpersonal skills, customer centric attitude. Can communicate with impact, in a way that is open, honest, consistent, and clear to influence and align stakeholders around a proposed approach.Proven team player and team builder used to manage multiple stakeholders in demanding time-critical situations.Strong organizational and analytical skillsProven ability to work creatively and analytically in a problem-solving environment.Ability to work in a fast-paced environment with rapidly changing priorities on multiple projects and initiatives.Passionate about areas of expertise, managing your own development by learning continuously from experience and seeking out development opportunities.Bonus PointsISC2 certifications like CISSP, CCSPPing CertificationsITIL 4 Foundations CertificationOther IDAM products certificationsNo Relocation support availableBusiness Unit SummaryAt Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about.We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum.Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen—and happen fast.Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.Job TypeRegularSoftware & ApplicationsTechnology & Digital