Role overview
Design, operate, and improve enterprise identity and access management systems using Ping Identity technologies. The work spans on-premises and hybrid environments, from authentication and federation design to integrations, identity lifecycle processes, and collaboration with architecture, security, and application teams.
Responsibilities
- Install, configure, administer, and enhance IAM components such as PingAM, PingIDM, and PingDirectory.
- Build single sign-on, multifactor authentication, and federation solutions using SAML, OAuth 2.0, and OIDC.
- Connect applications and target systems through REST APIs, product connectors, and automation scripts.
- Support identity lifecycle processes, directory services, schema extensions, access policies, and role- or attribute-based access controls.
- Improve self-service, delegated administration, and workflow-based processes.
- Work with architecture, security, and application teams to deliver secure, scalable solutions.
Requirements
- Several years of hands-on experience with at least one of PingAM, PingIDM, or PingDirectory.
- Strong understanding of authentication, authorization, and federation standards.
- Linux skills and scripting or automation experience with languages such as Python, Groovy, JavaScript, or Bash.
- Ability to work through complex project environments and interpret architectural and business requirements.
- Familiarity with Jira, Confluence, GitLab, and Microsoft Office.
- Fluent English; willingness to travel.
Nice to have
- German or additional language skills.
Benefits and work setup
- Hybrid or remote work in Germany, with listed locations in Essen, Frankfurt, Karlsruhe, Munich, Oberhaching, and Stuttgart.
- Flexible working hours, a flexitime model, and 30 days of annual leave.
- Mobility options include a public transport contribution, company car program, and bicycle leasing.
- Wellbeing support, including personal coaching and a company sports membership; learning opportunities include an internal university and academy.