Senior Consultant, Ping Identity Advanced Identity Cloud (AIC)

identityfusion; Tampa (FL); Remote; USD 120,000 - 180,000; Full time

Job summary

Identity Fusion is seeking a Senior Consultant to lead design and delivery of IAM solutions on PingOne Advanced Identity Cloud for enterprise clients. You will own solution architecture, drive hands-on delivery from discovery to go-live, and mentor junior consultants in a remote, client-facing setting.

You will collaborate with executives, configure SSO/MFA, and integrate systems via REST/SOAP, SCIM, and custom connectors, while aligning with Zero Trust and RBAC/ABAC principles.

Qualifications

• 5+ years IAM consulting or engineering experience, incl. 3+ years with AIC in production.
• Lead full-lifecycle AIC effort from architecture to deployment and hyper care.
• Strong knowledge of IAM: SSO, MFA, federation, RBAC/ABAC, Zero Trust.
• Proficiency with REST/SOAP APIs and scripting languages (JavaScript or Groovy).
• Experience in SaaS model, multiple tenant environments, and pipelines.

Responsibilities

• Lead design, configuration and deployment of AIC solutions.
• Senior technical lead on client engagements; conduct discovery and deliver design documents; own delivery through implementation and cutover.
• Architect and implement SSO, MFA, federation and passwordless authentication.
• Design and manage identity lifecycle processes.
• Integrate AIC with enterprise systems via REST/SOAP APIs, SCIM and custom connectors.
• Advise on IAM architecture, RBAC/ABAC and Zero Trust principles.
• Troubleshoot provisioning and authentication across environments; lead root-cause analysis.
• Produce technical documentation and lead knowledge-transfer sessions.
• Mentor junior and mid-level consultants; contribute to delivery methodology and accelerators.
• Monitor system performance and propose tuning; stay updated on IAM trends.
• Support presales with scoping and technical input.

Skills

SAML

OAuth 2.0

OIDC

SCIM

WS-Fed

FIDO2/WebAuthn

REST APIs

Groovy/JavaScript

AIC expertise

RBAC/ABAC

Education

Bachelor’s degree in CS or Info Sec

Tools

PingOne AIC

Frodo tooling

Git (Bitbucket/GitHub/GitLab)

CI/CD pipelines

JavaScript

Groovy

Job description

Company Overview

Identity Fusion consultants have worked in the identity management space for over 25 years, dating back to the early days of Netscape. As a thought leader in the identity and access management space, Identity Fusion works with clients across industries including healthcare, financial services, high tech, manufacturing and publishing. Each client has different goals, but they all share one thing in common: the need for a dynamic and robust infrastructure to simplify the processes associated with IAM technologies delivering real business value.

We are seeking a bright, motivated Senior Consultant with a passion for architecting and implementing PingOne AIC, built on the latest technologies. You will work in a fast paced, fun and dynamic environment on a variety of projects. You’ll gain exposure to clients and a variety of needs across multiple industries, collaborate within a high caliber, fast paced project team and help mentor the consultants around you while building world class systems for Fortune 500 clients.

We offer competitive salaries, full benefits, extensive training and mentorship and performance based incentives. You must have the ability to travel, but for the most part work is performed remotely.

Position Overview

As a Senior Consultant, you will lead the design and delivery of identity and access management solutions for enterprise clients built on the Ping Identity Advanced Identity Cloud (AIC) platform. The work is typically remote, though travel may periodically be required. You must be as comfortable at the boardroom table as you are on the whiteboard and keyboard and be able to articulate the business value of identity solutions to executive stakeholders while also configuring and delivering the technical components of an AIC implementation.

As a Senior Consultant, you will own the solution architecture and hands-on delivery for client engagements built on the PingOne Advanced Identity Cloud (AIC) platform, spanning both Identity Management and Access Management workstreams. This includes identity lifecycle management and synchronization across enterprise applications, directories and authoritative sources, as well as authentication, authorization, federation and access orchestration.

This is a senior, client-facing delivery position; you will serve as the technical lead across the engagement lifecycle from discovery and solution design through implementation, integration, go-live and hypercare. The role moves comfortably between hands-on configuration (including identity synchronization, mappings, reconciliation, lifecycle workflows, connectors and integrations and authentication/orchestration journeys) and advisory conversations with client security and identity leadership. As a Senior Consultant you will also provide technical direction and mentorship to junior consultants while ensuring solutions are scalable, secure, supportable and aligned with the client’s broader IAM architecture and business requirements.

Key Responsibilities

• Lead the design, configuration and deployment of AIC solutions. This includes journeys/orchestration, authentication trees and authorization policies.
• Serve as the senior technical lead on client engagements. Be able to perform discovery and requirements sessions, producing solution architecture and design documents and owning delivery through implementation, testing and cutover.
• Architect and implement single sign-on (SSO), multifactor authentication (MFA), federation (SAML, OAuth 2.0, OIDC) and passwordless authentication (Passkeys/WebAuthn) across web, mobile and native applications.
• Design and manage identity lifecycle processes (joiner, mover, leaver) integrated with upstream authoritative source(s) and downstream target systems.
• Integrate AIC with enterprise systems via REST/SOAP APIs, SCIM and custom connectors; script and extend platform capabilities (JavaScript/Groovy, scripted decision nodes).
• Advise clients on IAM architecture best practices, including RBAC/ABAC models, Zero Trust principles and how AIC's fully managed SaaS model changes cloud/infrastructure responsibilities versus self-managed Ping (PingAM/PingIDM/PingDS) deployments.
• Troubleshoot complex provisioning, authentication issues across production and pre-production environments; lead root-cause analysis and remediation.
• Produce clear technical documentation (architecture diagrams, runbooks and configuration standards) and lead knowledge-transfer sessions with client teams.
• Mentor and technically guide junior and mid-level consultants on engagements; contribute to internal AIC delivery methodology, accelerators and reusable assets.
• Monitor system performance post-deployment and recommend tuning, scaling or roadmap improvements; stay current on emerging IAM trends and new Ping platform capabilities.
• Support presales activities as needed, including scoping, level of effort estimation and technical input for proposals and statements of work.

Required Qualifications

• 5+ years of hands-on IAM consulting or engineering experience, including at least 3+ years working directly with AIC in production enterprise environments.
• Demonstrated experience leading full-lifecycle AIC effort, including architecture and design through deployment and hyper care (not just administration).
• Strong working knowledge of identity and security protocols: SAML, OAuth 2.0, OIDC, SCIM, WS-Fed, Kerberos and FIDO2/WebAuthn.
• Solid understanding of IAM concepts including SSO, MFA, federation, RBAC/ABAC, Zero Trust and lifecycle access management.
• Working proficiency with REST/SOAP APIs and at least one scripting or programming language commonly used in Ping environments (JavaScript and/or Groovy).
• Comfort operating within AIC's fully managed SaaS model. This includes implementation across multiple tenant environments, coordination of ESVs (Environment Secrets & Variables), configuration of promotion pipelines and the use of tools such as Frodo for managing and debugging AIC.
• Proficiency with Git-based version control (Bitbucket, GitHub or GitLab) and CI/CD pipelines for managing IAM configuration-as-code including branching, code review and release workflows.
• Excellent client-facing communication skills. Be able to translate technical detail for executive stakeholders and translate business requirements into technical designs for engineers.
• Bachelor’s degree in computer science, Information Security or a related field, or equivalent professional experience.
• Ability to work independently in a remote, client-facing consulting environment, including occasional travel to client sites.
• Must be authorized to work in the United States; U.S. citizenship may be required for certain client engagements (for example, government or regulated-industry contracts).

Preferred Qualifications

• Certified Professional – PingOne Advanced Identity Cloud (AIC)
• Prior experience in a professional services, systems integrator or IAM consultancy environment.
• Experience with identity data consolidation/virtualization and directory migration projects.
• Security certifications such as CISSP, CISM or CCSP.

Core Competencies

• Client-first consulting mindset with strong ownership over engagement outcomes
• Clear, confident communicator across technical and executive audiences
• Analytical problem-solver who can operate independently under ambiguity
• Collaborative mentor who elevates the people around them
• Comfortable balancing hands-on technical work with advisory responsibilities