Ping ID Engineer Zigabyte Corporation · Chantilly, VA Full-time · On-site — 1 hour ago

Emploive; Chantilly, Northern (VA, KY); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Ping Identity engineer role focused on implementing and sustaining PingFederate, PingAccess, and PingDirectory within a federal ICAM environment. You will ensure secure authentication, authorization, and federation aligned with Zero Trust principles and NIST guidelines.

Responsibilities include designing integrations using SAML/OIDC/OAuth 2.0/SCIM, developing policy enforcement, and producing ATO artifacts for FISMA, FedRAMP, and CMMC compliance.

Qualifications

• Hands-on experience with Ping Federate, PingAccess, PingDirectory, and PingOne.
• Proficient in identity federation, authentication flows, and policy development using SAML, OIDC, OAuth 2.0, and SCIM.
• Strong understanding of ICAM frameworks (FICAM, NIST 800-63, Zero Trust).

Responsibilities

• Designs, implements, and maintains Ping Identity solutions (PingFederate, PingAccess, PingDirectory).
• Integrates Ping with applications using SAML, OAuth 2.0, OIDC, and SCIM.
• Develops authentication and authorization policies to enforce Zero Trust.
• Onboards applications into Ping Identity ecosystem in collaboration with cybersecurity and system teams.
• Prepare system documentation, configuration baselines, and ATO artifacts for compliance (FISMA, FedRAMP, CMMC).

Skills

Identity federation

Authentication flows

Zero Trust concepts

ICAM understanding

Tools

PingFederate

PingAccess

PingDirectory

PingOne

SAML

OIDC

OAuth 2.0

SCIM

Job description

Job Summary

The Ping Engineer will support the implementation, configuration, and sustainment of Ping Identity solutions within a federal enterprise Identity, Credential, and Access Management (ICAM) environment. This role is responsible for delivering secure authentication, authorization, and federation services using Ping products such as PingFederate, PingAccess, and PingDirectory, in alignment with federal Zero Trust and cybersecurity mandates.

Responsibilities

• Designs, implements, and maintains Ping Identity solutions, including PingFederate (SSO/federation), PingAccess (policy enforcement), and PingDirectory (directory services).
• Integrates Ping with internal and external applications using SAML, OAuth 2.0, OIDC, and SCIM protocols.
• Develops authentication and authorization policies to enforce Zero Trust principles such as least privilege and continuous access evaluation.
• Configures identity federation between external identity providers and internal service providers in compliance with NIST SP 800-63.
• Collaborates with cybersecurity and system teams to onboard applications and services into the Ping Identity ecosystem.
• Troubleshoots and resolves issues related to authentication flows, token exchanges, and identity federation.
• Supports the development of ICAM and Zero Trust roadmaps, providing technical leadership and guidance on Ping product use.
• Prepares system documentation, configuration baselines, and ATO artifacts in support of FISMA, FedRAMP, and CMMC compliance.
• Implements automation and monitoring scripts to ensure high availability and policy enforcement across the identity fabric.
• Performs other related duties as assigned.

Required Skills/Abilities

• Hands-on experience with PingFederate, PingAccess, PingDirectory, and PingOne.
• Proficient in identity federation, authentication flows, and access policy development using SAML, OIDC, OAuth 2.0, and SCIM.
• Strong understanding of ICAM frameworks (e.g., FICAM, NIST 800-63, Zero Trust Architecture).