Zero-Trust Ping Identity Engineer (ICAM)

Emploive; Chantilly, Northern (VA, KY); Hybrid; USD 120,000 - 170,000; Full time

Job summary

Ping Identity engineer role focused on implementing and sustaining PingFederate, PingAccess, and PingDirectory within a federal ICAM environment. You will ensure secure authentication, authorization, and federation aligned with Zero Trust principles and NIST guidelines.

Responsibilities include designing integrations using SAML/OIDC/OAuth 2.0/SCIM, developing policy enforcement, and producing ATO artifacts for FISMA, FedRAMP, and CMMC compliance.

Qualifications

• Hands-on experience with Ping Federate, PingAccess, PingDirectory, and PingOne.
• Proficient in identity federation, authentication flows, and policy development using SAML, OIDC, OAuth 2.0, and SCIM.
• Strong understanding of ICAM frameworks (FICAM, NIST 800-63, Zero Trust).

Responsibilities

• Designs, implements, and maintains Ping Identity solutions (PingFederate, PingAccess, PingDirectory).
• Integrates Ping with applications using SAML, OAuth 2.0, OIDC, and SCIM.
• Develops authentication and authorization policies to enforce Zero Trust.
• Onboards applications into Ping Identity ecosystem in collaboration with cybersecurity and system teams.
• Prepare system documentation, configuration baselines, and ATO artifacts for compliance (FISMA, FedRAMP, CMMC).

Skills

Identity federation

Authentication flows

Zero Trust concepts

ICAM understanding

Tools

PingFederate

PingAccess

PingDirectory

PingOne

SAML

OIDC

OAuth 2.0

SCIM

Job description

Ping Identity engineer role focused on implementing and sustaining PingFederate, PingAccess, and PingDirectory within a federal ICAM environment. You will ensure secure authentication, authorization, and federation aligned with Zero Trust principles and NIST guidelines.

Responsibilities include designing integrations using SAML/OIDC/OAuth 2.0/SCIM, developing policy enforcement, and producing ATO artifacts for FISMA, FedRAMP, and CMMC compliance.