Ping Identity ICAM Engineer: Zero Trust Specialist

zigabyte; Chantilly (VA); On-site; USD 120,000 - 170,000; Full time

Job summary

zigabyte is seeking a Ping Engineer to support the implementation, configuration, and sustainment of Ping Identity solutions in a federal ICAM environment in Chantilly, VA. The role focuses on delivering secure authentication, authorization, and federation services using PingFederate, PingAccess, PingDirectory, and PingOne.

You will design integrations with SAML, OIDC, OAuth 2.0, and SCIM, advance Zero Trust policies, and help achieve compliance such as FISMA, FedRAMP, and CMMC through

Qualifications

• Hands-on experience with PingFederate, PingAccess, PingDirectory, and PingOne.
• Expertise in identity federation and authentication flows using SAML, OIDC, OAuth 2.0, and SCIM.
• Strong knowledge of ICAM frameworks (FICAM, NIST 800-63, Zero Trust).

Responsibilities

• Designs, implements, and maintains Ping Identity solutions, including PingFederate (SSO/federation), PingAccess (policy enforcement), and PingDirectory (directory services).
• Integrates Ping with internal and external applications using SAML, OAuth 2.0, OIDC, and SCIM protocols.
• Develops authentication and authorization policies to enforce Zero Trust principles such as least privilege and continuous access evaluation.
• Configures identity federation between external identity providers and internal service providers in compliance with NIST SP 800-63.
• Collaborates with cybersecurity and system teams to onboard applications and services into the Ping Identity ecosystem.
• Troubleshoots and resolves issues related to authentication flows, token exchanges, and identity federation.
• Supports the development of ICAM and Zero Trust roadmaps, providing technical leadership and guidance on Ping product use.
• Prepares system documentation, configuration baselines, and ATO artifacts in support of FISMA, FedRAMP, and CMMC compliance.
• Implements automation and monitoring scripts to ensure high availability and policy enforcement across the identity fabric.
• Performs other related duties as assigned.

Skills

PingFederate

PingAccess

PingDirectory

PingOne

Identity federation

SAML

OIDC

OAuth 2.0

SCIM

Zero Trust

Job description

zigabyte is seeking a Ping Engineer to support the implementation, configuration, and sustainment of Ping Identity solutions in a federal ICAM environment in Chantilly, VA. The role focuses on delivering secure authentication, authorization, and federation services using PingFederate, PingAccess, PingDirectory, and PingOne.

You will design integrations with SAML, OIDC, OAuth 2.0, and SCIM, advance Zero Trust policies, and help achieve compliance such as FISMA, FedRAMP, and CMMC through