Job
Description
Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations. Must have skills : Ping Identity Good to have skills : NA Minimum 5 Year(s) Of Experience Is Required Educational Qualification : 15 years full time education Summary: As a Security Architect, you will define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Your typical day will involve collaborating with various teams to assess security needs, documenting security controls, and transitioning to cloud security-managed operations, all while ensuring compliance with industry standards and best practices. Roles & Responsibilities: -Designing and Implementing IAM Solutions: -Utilizing PingOne DaVinci to design, implement, and maintain secure identity and access management solutions. -Creating and configuring applications within PingOne DaVinci. -Configuring flow policies for applications. -Designing and implementing authentication, registration, MFA, and password reset flows. -Integrating PingOne DaVinci flows into web applications using various methods (widget, API calls, OIDC, SAML). -Integrating PingOne SSO and identities within DaVinci flows. -Working with OAuth, OIDC, SAML, and Header-based authentication. -PingOne DaVinci Management and Development: -Managing PingOne DaVinci environments and connectors. -Creating, maintaining, testing, troubleshooting, and implementing identity orchestration flows. -Importing and exporting flows and creating/using subflows to manage complexity. -Configuring input and output schemas. -Expanding flow functionality with custom JavaScript. -Managing multiple flow versions. -Creating and configuring connector instances (e.g., HTTP, Challenge, Flow Conductor, Function, Code Snippet). -Building basic user interactions with DaVinci flows and customizing HTML templates for user experience. -Providing L1/L2 daily run support for PingOne CIAM platform, including user provisioning, authentication flows, and policy enforcement. -Monitoring platform health and performance, responding to alerts. -Troubleshooting and resolving incidents related to SSO, MFA, token exchanges, and directory syncs. -Supporting application onboarding and integration with PingOne. -Performing routine access reviews, audit log reviews, and user lifecycle management tasks. -Maintaining and updating runbooks, knowledge articles, and SOPs. -Collaborating with engineering and IAM architecture teams for issue escalation and permanent fixes. -Collaboration and Testing: -Participating in Scrum calls and other agile ceremonies. -Performing application unit and smoke testing. -Conducting A/B testing for user journey optimization. Professional & Technical Skills: -Strong expertise in PingOne DaVinci: In-depth understanding of its features, flow building, connector functionality, and application integration. -Identity and Access Management (IAM) Concepts: Solid understanding of federation, single sign-on (SSO), OAuth, OpenID Connect (OIDC), SAML, MFA, and related protocols. -Ping Identity Products: Experience with other Ping Identity products such as Ping Access, Ping Federate, Ping Directory, PingID, and PingOne for Customers/Workforce. -Directory Services: Experience with LDAP, Azure AD, and other cloud directories. -Programming/Scripting: Proficiency in JavaScript for custom flow functionality. Familiarity with API tools (e.g., Postman) and basic scripting (Shell, Python) for automation and diagnostics is often a plus. -API Integration: Experience with REST APIs and JSON. -Cloud Environments: Familiarity with IaaS and PaaS cloud environments (e.g., AWS, Azure). -Strong analytical and troubleshooting abilities to identify and resolve complex IAM issues. -Ability to design optimal solutions based on customer requirements. -Experience working in Agile/Scrum environments. -Understanding of ITIL-based environments (Incident, Change, Problem Management) is often preferred. -Certifications (Desired, not always mandatory): -Ping Identity Certified Professional – PingOne DaVinci. -Other Ping Identity certifications (e.g., PingFederate, PingAccess, PingDirectory). -CompTIA Security+, Certified Identity and Access Manager (CIAM), or equivalent. -This type of role is crucial for organizations looking to build seamless, secure, and optimized user experiences through intelligent identity orchestration. Additional Information: - The candidate should have minimum 5 years of experience in Ping Identity. - This position is based at our Gurugram office. - A 15 years full time education is required.
