Ping Identity Engineer

KPG99 INC; Chicago (IL); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

Annual Incentive

Medical Coverage

Dental & Vision

Disability Insurance

Pet Insurance

Commuter Benefits

Training Reimbursement

Vacation & Holidays

401K Plan

Performance Bonus

College Fund

Student Loan Refinancing

Parental Leaves

Job summary

KPG99 INC in Chicago, IL seeks an experienced Ping Identity Engineer to design, implement, support, and optimize IAM solutions using Ping Identity suite. You will work on SSO, federation, MFA, API security, and directory services for enterprise environments.

Responsibilities include designing authentication and authorization using PingFederate, PingAccess, and PingDirectory; integrating SaaS, cloud, and on-prem apps; configuring OAuth/OIDC flows; and ensuring security compliance.

Qualifications

• Experience designing and implementing enterprise IAM using Ping Identity.
• Strong knowledge of SSO, Federation, MFA, and API security.
• Experience with large-scale BFSI or regulated environments.
• Ability to configure SAML, OAuth, and OIDC.
• Certifications are a plus.

Responsibilities

• Design and implement authentication and authorization solutions using PingFederate, PingAccess, and PingDirectory.
• Configure and maintain SSO integrations for SaaS, cloud, and on-premises applications.
• Implement federation between internal and external identity providers.
• Configure OAuth and OIDC-based authentication flows.
• Monitor and troubleshoot IAM platform health and performance.
• Create technical documentation and SOPs.

Skills

SSO & Federation

MFA

API Security

Directory Services

PingFederate

PingAccess

PingDirectory

OAuth & OIDC

RBAC / IAM Policy

Zero Trust

Education

Bachelor of Computer Science

Tools

PingFederate

PingAccess

PingDirectory

Okta

Splunk

Dynatrace

Job description

We are seeking an experienced Ping Identity Engineer to design, implement, support, and optimize enterprise Identity and Access Management (IAM) solutions using the Ping Identity suite. The ideal candidate will possess strong expertise in SSO, Federation, MFA, API security, and directory services, with experience supporting large-scale enterprise or BFSI environments.

Mandatory Skills

Ping Identity Technologies

• PingOne (good to have)
• PingDataSync (good to have) Authentication & Federation
• FIDO2 Directory Services
• Authorization & Access Policies
• Zero Trust Concepts Platforms
• Apache / NGINX / Web Servers

Key Responsibilities

• Design and implement enterprise authentication and authorization solutions using PingFederate, PingAccess, and PingDirectory.
• Configure and maintain SSO integrations for SaaS, cloud, and on-premises applications.
• Implement federation between internal and external identity providers.
• Configure OAuth and OIDC-based authentication flows.

Application Onboarding

• Integrate new applications with Ping Identity platforms.
• Configure SAML, OAuth, and OIDC connections.
• Support API security and token-based authentication mechanisms.

Access Management

• Design authentication policies and access control frameworks.
• Implement MFA and adaptive authentication controls.
• Configure role-based access controls aligned with least privilege principles.

Operations & Support

• Troubleshoot authentication, federation, and access-related issues.
• Monitor Ping platform health and performance.
• Perform upgrades, patching, and platform maintenance activities.
• Support production incidents and root cause analysis.

Security & Compliance

• Ensure adherence to security standards and compliance requirements.
• Support audit activities and access reviews.
• Develop and maintain technical documentation, SOPs, and architecture diagrams.

Preferred Qualifications

• Experience in BFSI, Healthcare, or other regulated industries.
• Experience with Okta, Entra ID, ForgeRock, Saviynt, or SailPoint.
• Knowledge of CI/CD pipelines and DevOps practices.
• Experience with Splunk , Dynatrace, or enterprise monitoring tools.
• Understanding of PAM, IGA, and CIAM concepts.

Certifications (Preferred)

• Ping Identity Certified Professional
• Microsoft Identity & Access Administrator

Nice-to-Have Skills

• Kubernetes and Docker
• Cloud IAM (Azure, AWS, GCP)
• LDAP Directory Performance Tuning BFSI-Specific Expectations
• Strong understanding of regulatory compliance and identity governance.
• Experience implementing secure customer and workforce authentication.
• Ability to support high-availability authentication platforms with minimal downtime.
• Experience handling security audits and access certification requirements.

Employee Benefits Summary

• Discretionary Annual Incentive.
• Comprehensive Medical Coverage: Medical & Health, Dental & Vision, Disability Planning & Insurance, Pet Insurance Plans.
• Family Support: Maternal & Parental Leaves.
• Insurance Options: Auto & Home Insurance, Identity Theft Protection.
• Convenience & Professional Growth: Commuter Benefits & Certification & Training Reimbursement.
• Time Off: Vacation, Time Off, Sick Leave & Holidays.
• Legal & Financial Assistance: Legal Assistance, 401K Plan, Performance Bonus, College Fund, Student Loan Refinancing.

Desired Candidate Profile

• Qualifications : BACHELOR OF COMPUTER SCIENCE