IAM Engineer-Ping Federate
Who We Are
The Role
We are seeking an experienced Senior IAM Engineer specializing in PingFederate and PingAccess to join our team. In this role, you will be instrumental in designing, implementing, and supporting robust, secure authentication and authorization solutions within a complex enterprise environment.
You will play a key part in driving our identity modernization efforts, building custom extensions, and securing seamless access across our core enterprise applications and modern cloud systems.
At Kyndryl we support all major cloud platforms, so you'll get the chance to use everything you know - and then some. You'll also become expert at knowing when and how to call on other SMEs outside your wheelhouse. Thinking your way around pre-existing limitations will grow your creativity and flexibility. You'll learn a lot here, and if you want to work toward certifications there are plenty of opportunities. The rewards for all this are many. You'll get to influence, create, and deliver something from start to finish. You will have the power to delight our clients.
Key Responsibilities
- IAM Architecture & Implementation: Design, deploy, and maintain secure enterprise authentication, federation, and authorization solutions centered on PingFederate and PingAccess.
- Custom Development & Integrations: Utilize solid Java skills and the Ping SDK to develop, optimize, and maintain custom Ping adapters, plugins, and custom integrations tailored to enterprise needs.
- Protocol & Standards Management: Drive implementation and best practices for modern identity protocols including SAML, OAuth 2.0, OpenID Connect (OIDC), FIDO2, and Single Sign-On (SSO).
- CI/CD & DevOps Automation: Integrate IAM configurations and deployment workflows into continuous integration and delivery pipelines using Azure DevOps.
- System Support & Troubleshooting: Perform root-cause analysis, advanced troubleshooting, and issue resolution for complex identity, access, and federation flows across systems.
- Proactive Collaboration: Work closely with cross-functional security, infrastructure, and development teams to advocate for secure, solution-oriented identity practices.
Your future at Kyndryl
This role opens the door to many career paths, both vertical and horizontal, and there may be opportunity to travel. It's a great chance for database administrators or other techs to break into the cloud. It's also a solid path to become enterprise or chief architect or a distinguished engineer! Whatever you see for yourself, you'll find the opportunity here.
Who You Are
You're good
What you do and possess the required experience to prove it. However, equally as important - you have a growth mindset; keen to drive your own personal and professional development. You are customer-focused - someone who prioritizes customer success in their work. And finally, you're open and borderless - naturally inclusive in how you work with others.
Required Qualification
- Total Experience: Minimum 5 years of hands-on experience in Identity & Access Management (IAM).
- Ping Identity Suite: Deep hands-on experience with PingFederate and PingAccess.
- IAM Protocols: Strong, foundational understanding of enterprise IAM concepts, standards, and protocols - including OAuth 2.0, OIDC, SAML, FIDO2, and SSO.
- Java Development & SDK: Solid Java development capabilities, specifically in building, extending, and maintaining custom Ping adapters, plugins, and integrations using the Ping SDK.
- DevOps & Delivery: Practical experience working with Azure DevOps and CI/CD deployment pipelines.
- Domain Focus: Proven, demonstrated experience delivering enterprise-grade authentication, Single Sign-On (SSO), and federation solutions in complex environments.
Preferred Qualification
- Groovy scripting experience.
- Exposure to or experience with broader Ping products and Microsoft Entra ID (Azure AD).
Being You
What You Can Expect
Get Referred!
Not included in the source posting: benefits.
Skills
Who can apply
The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.
Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.