Ping Architect

Job Overview:

PingFederate Architect

Key Responsibilities:

• Design and deploy

  PingFederate and Ping One Advanced Identity Cloud

  solutions for authentication, SSO, and federation
• Lead

  IAM integration and migration projects

  from platforms such as SiteMinder, OAM, ForgeRock, or Okta
• Develop and maintain

  federation configurations

  using SAML, OAuth 2.0, OpenID Connect, and WS-Federation
• Coordinate with

  application owners, infrastructure teams

  , and external stakeholders to enable seamless identity integration
• Act as the

  final technical escalation point

  for identity federation and access management issues
• Guide implementation teams on

  industry best practices

  , architectural alignment, and policy enforcement
• Support

  BCP/DR planning

  , ensuring high availability and failover readiness of access management systems
• Mentor team members, document design patterns, and support knowledge sharing within the IAM community

Required Skills

• 12+ years of IAM experience

  , including

  5+ years in Ping Identity technologies

• Hands-on expertise in

  PingFederate, Ping One Advanced Identity Cloud

  , and associated modules
• Experience integrating with

  cloud, on-premises, and hybrid environments

• In-depth understanding of

  identity federation protocols

  (SAML, OAuth 2.0, OpenID Connect)
• Strong background in working with

  user directories

  (LDAP, AD) and

  identity gateways

• Proven success in

  IAM platform migrations

  and enterprise-scale integrations

Technical Skills:

• Languages:

  Java, JavaScript, Groovy, PowerShell

• Web Technologies:

  HTML, CSS, JSP/Servlets, React, Angular, TypeScript

• Platforms:

  Windows, Linux/Unix, Tomcat, WebLogic, JBOSS, WebSphere

• IAM Protocols & APIs:

  SAML, OAuth 2.0, OIDC, REST, SOAP, Kerberos

• Directory Services:

  Active Directory, LDAP, Radiant Logic VDS, UnboundID

• DevOps:

  CI/CD concepts, config management, automation scripting

• Monitoring & Availability:

  Disaster Recovery (DR), high availability (HA) configuration

Mandatory Certifications:

• Certified Professional - PingAccess
• Certified Professional PingDirectory
• Certified Professional - PingFederate

Good to Have Certifications:

• Certified Expert - PingOne
• Certified Expert - PingAccess
• Certified Expert - PingDirectory
• Certified Expert - PingFederate