Senior IAM Engineer | PingFederate | AI | Passwordless

Equifax, Inc.; Alpharetta (GA); Hybrid; USD 180,000 - 240,000; Full time

Job summary

Equifax, Inc. in Alpharetta, GA is seeking a senior IAM leader to helm zero-downtime identity services and sunset legacy credentials with AI-driven self-healing for PingFederate.

You will lead a 10+ engineer squad, own the Tier 0 PingFederate SSO roadmap, and act as Incident Commander during outages to restore services quickly. The role emphasizes IaC with Terraform and GitOps, automated deployments, and advancing a self-healing infrastructure through autonomous AI agents.

Qualifications

• 10+ years of experience managing PingFederate in high-availability clusters.
• Experience designing agentic AI workflows that monitor health and prevent outages.
• Proven record of zero-downtime upgrades and mission-critical authentication traffic.
• Skilled in automating PingFederate with Terraform, Ansible, or Jenkins.
• Treat identity configurations as code across dev, staging, production.
• Knowledge of OAuth 2.0, OpenID Connect (OIDC) policy, and Token Exchange for apps and AI identities.
• Ability to lead a team of up to 8–10 engineers.

Responsibilities

• Act as technical lead for a squad of 10+ identity engineers, fostering technical excellence and zero-downtime discipline.
• Own the SSO Roadmap as chief architect for Tier 0 PingFederate identity patterns.
• Serve as Incident Commander during outages, guiding rapid restoration and post-mortems.

Skills

PingFederate

Terraform

Ansible

Jenkins

GitOps

AI workflows

OIDC

OAuth2

Team leadership

Incident command

Tools

PingFederate

Terraform

Ansible

Jenkins

Job description

Take the helm of our mission-critical identity services, where you’ll be responsible for maintaining a zero-downtime environment for our most vital applications. You will lead the charge in sunsetting legacy credentials in favor of sophisticated passwordless journeys, all while integrating AI to optimize and self-heal our PingFederate infrastructure. This is a high-impact leadership role for someone who views identity as the ultimate frontier of both user experience and enterprise resilience.

• This position is based out of our Alpharetta, Georgia office.
• We believe great things happen when teams connect. Our schedule is built around 4 days of high-impact, in-office collaboration (Monday–Thursday), paired with Friday Flexibility to wrap up your week remotely.
• This position does not offer immigration sponsorship (current or future) including F-1 STEM OPT extension support.
• This position is not open to third-party vendors or C2C.
• In person interviews are required.

What you’ll do

• Perform as the technical lead for a high-performing squad of 10+ identity engineers, fostering a culture of technical excellence, continuous learning, and "zero-downtime" operational discipline.
• Own the SSO Roadmap: Serve as the chief architect for our Tier 0 PingFederate environment, translating complex business requirements into scalable, secure, and resilient identity patterns.
• Act as an Incident Commander: Provide executive-level technical leadership during critical outages, ensuring rapid restoration of service and leading deep-dive post-mortems to prevent recurrence.
• Deploy Agentic AI Workflows: Build and oversee autonomous AI agents that monitor infrastructure health in real-time, enabling proactive anomaly detection and automated self-healing of the PingFederate cluster.
• Enforce Infrastructure-as-Code (IaC): Standardize all configuration and deployment pipelines using Terraform and GitOps, ensuring that the identity fabric is reproducible, version-controlled, and free from manual drift.
• Be a visionary who can move us toward a self-healing infrastructure, where automated agents orchestrate real-time recovery and optimization.

What experience you need

• 10+ years of experience managing PingFederate in a high-availability, clustered environment.
• You have designed and deployed agentic AI workflows that proactively monitor system health to identify and mitigate potential outages before they impact the user base.
• Experience in "Zero-Downtime" upgrades, configuration replication, and managing mission-critical (Tier 0) authentication traffic where even a 5-minute outage is unacceptable.
• Proficiency in automating PingFederate deployments using Terraform, Ansible, or Jenkins.
• Ability to treat identity configurations as code to ensure consistency across dev, staging, and production environments.
• Beyond basic SSO, understanding of managing complex OAuth Grant Types, OpenID Connect (OIDC) policy management, and Token Exchange—critical for supporting modern mobile apps and AI-agent identities.
• Ability to be a Team Lead of up to 8-10 engineers.

What could set you apart

• Developed agentic AI workflows that reduced Mean Time to Recovery (MTTR) by 40% through automated self-healing.
• Maintained 99.99% availability for a PingFederate cluster supporting 50k+ concurrent sessions.
• Led the migration of 10,000+ users from legacy MFA (SMS/OTP) to phishing-resistant FIDO2/WebAuthn passwordless flows.
• Ping Identity Certified Expert – PingFederate (PFAA-001).
• Automated 100% of PingFederate configuration deployments using Terraform and GitOps, eliminating 95% of manual console errors.
• Designed custom OAuth 2.0 Grant Types and OpenID Connect (OIDC) policy fragments for 200+ integrated enterprise applications.
• You have been a Team Lead for a global team of 10+ IAM engineers, overseeing a $2M+ annual budget and cross-functional roadmap delivery.

#LI-Hybrid

#LI-KD1