Kaiser Permanente

Summary Kaiser Permanente is seeking a Sr. IT Engineer – Identity and Access Management (Ping Identity) to join our IAM engineering team in Pune (hybrid work model). In this role, you will design, build, and support secure, scalable IAM solutions using Ping Identity technologies including PingFederate, PingAccess, and PingID. You’ll work across environments to manage deployments, automate processes, and resolve complex integration issues contributing to our broader identity strategy in collaboration with infrastructure, security, and application teams. Role Description This is a full-time role for a Sr. IT Engineer – Identity and Access Management (Ping Identity) to join our IAM Engineering team in Pune, with flexibility for hybrid work. The working hours for this role are aligned to the US shift: 2:00 PM to 11:00 PM IST . This role involves designing, building, deploying, and supporting IAM solutions leveraging Ping Identity technologies such as PingFederate, PingAccess, PingDirectory, PingID, and PingOne . The engineer will be responsible for end-to-end implementation, upgrades, patching, and automation of IAM components across non-production and production environments. This includes collaborating with cross-functional teams (infrastructure, security, risk, and app owners), resolving complex issues, ensuring secure integration patterns, and contributing to the broader IAM strategy through process improvement and technical innovation. Responsibilities Build, configure, and deploy Ping Identity solutions across environments Troubleshoot and resolve complex IAM integration and support issues Participate in IAM solution upgrades, patching, and performance tuning Work closely with internal and external stakeholders to translate business requirements into secure technical designs Develop and maintain automation scripts for improving process efficiency Contribute to best practices, documentation, and knowledge sharing across the team Support compliance, security audits, and remediation efforts where required Qualifications Minimum 6 years of hands-on experience with Ping Identity components (PingFederate, PingAccess, PingDirectory, PingID, PingOne) OR 4+ years in Ping Identity with other IAM platform exposure Strong understanding of Access Management, SSO, OAuth2, SAML , and session security Experience working in an Agile delivery model and DevSecOps environment Solid knowledge of Windows, Linux, AD, LDAP, APIs , and web application architectures Scripting/Programming skills in Java, Python, PowerShell, or Shell scripting Familiarity with build tools (Git, Maven) and CI/CD pipelines Strong analytical and troubleshooting skills with a proactive approach Good interpersonal and communication skills Bachelor's degree in Computer Science, IT, or a related field Experience in Identity Management or Privileged Access Management (PAM) or certificate management is a plus