Ping Federate and Ping directory

Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you.

Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees.

• Job seeker Video Testimonials
  
• Employee Glassdoor Reviews
  

If you are a Ping Federate & Directory Consultant, looking for excitement, challenge and stability in your work, then you would be glad to come across this page.

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.

Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution.

Requirements

Job Summary:

Kroger project: we are looking for a Senior IAM Engineer – Ping Identity (PingFederate & PingDirectory) with deep, hands-on implementation experience in PingFederate and PingDirectory to join our IAM team. The ideal candidate should have at least 5 years of experience in IAM solution design, implementation, and support, strong IAM and federation fundamentals, and a proven ability to deliver end-to-end Ping deployments and work across cross-functional teams. Hands-on experience with PingFederate, PingDirectory, Active Directory, Okta/Azure AD, and a collaborative, leadership mindset are highly valued.

Key Responsibilities:

• Design, install, configure, implement, and maintain PingFederate (clustered, highly available deployments) for enterprise SSO and federation.
  
• Design, deploy, and operate PingDirectory (LDAP/SCIM directory services), including schema design, replication topology, indexing, data migration, and performance tuning.
  
• Configure and onboard applications to PingFederate using SAML 2.0, OAuth 2.0, and OpenID Connect, including adapters, authentication policies, access token managers, and attribute mappings.
  
• Build and customize PingFederate integrations: IdP and SP connections, authentication selectors, password credential validators, OAuth client management, and custom Java-based plugins/adapters as needed.
  
• Integrate PingFederate and PingDirectory with Active Directory/LDAP, Azure AD, Okta, HR systems, and other identity providers and data sources.
  
• Lead IAM implementation initiatives from requirements and design through build, testing, cutover, and production support.
  
• Drive automation of IAM deployment and administration using scripting (Python, Shell, PowerShell), Ping Admin APIs, and CI/CD pipelines.
  
• Collaborate with Security, HR, IT Ops, and Application teams to ensure a scalable, secure IAM architecture.
  
• Act as a technical mentor and lead for junior engineers and support teams.
  
• Support identity lifecycle processes and participate in IAM risk assessments and internal/external audits, ensuring compliance with regulatory requirements such as SOX and GDPR.
  

• Develop and implement policies, procedures, and standards related to IAM lifecycle, authentication, federation, and entitlement management.
  
• Provide technical leadership and mentorship to other team members on PingFederate, PingDirectory, Okta, Azure AD, etc.
  
• Enables single sign-on (SSO), federation, and MFA/passwordless services to provide secure and seamless user experiences
  
• Designs and automates authentication and authorization flows for all identities across Kroger, including workforce, partner, and customer use cases
  
• Collaborates with IT and business stakeholders to define and implement IAM solutions related to authentication and access controls that improve Kroger's cybersecurity processes and end-user experiences
  
• Drives continuous improvement of authentication and authorization processes
  
• Provides subject matter expertise to business areas who are managing their own control environment in regards to authentication and access controls
  
• Collaborates with the Cybersecurity GRC team to ensure IAM-related policies and standards are kept up-to-date and aligned to applicable compliance requirements
  
• Develops IAM business processes, risk and controls based on industry best practices and applicable compliance requirements
  
• Develops and maintains monitoring, patching, backup/DR, and upgrade processes for Ping platforms
  

Required Qualifications:

• 5-6+ years of experience in IAM engineering, implementation, architecture, and support.
  
• 3+ years of hands-on implementation experience with PingFederate (installation, clustering, SSO/federation configuration, application onboarding, upgrades, and production support).
  
• 2+ years of hands-on implementation experience with PingDirectory (deployment, schema and replication design, data migration/synchronization, performance tuning, and support).
  
• Strong experience with federation and authentication standards: SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, and FIDO2.
  
• Experience integrating Ping with Active Directory/LDAP, Azure AD/Entra ID, Okta, HRIS systems, and SaaS/enterprise applications.
  
• Proficiency in Java (custom adapters/plugins), REST APIs, and scripting (Python, Shell, or PowerShell); experience with the PingFederate and PingDirectory admin APIs.
  
• Experience with load balancers, PKI/certificate management, and TLS/SSL configuration in IAM environments.
  
• Strong understanding of IAM principles, including RBAC, ABAC, MFA, passwordless authentication, and privileged access.
  
• Experience supporting Ping deployments in Linux and cloud/hybrid environments (AWS, Azure, or GCP).
  
• Ability to work in Agile environments and lead sprint-based IAM delivery efforts.
  
• Excellent communication, documentation, and collaboration skills, with the ability to clearly communicate technical concepts to both technical and non-technical audiences.
  
• Ability to translate business requirements into technical designs, detailed requirements, and architecture models.
  

Preferred Skills & Good to Have:

• Experience with other Ping Identity products such as PingAccess, PingID, PingOne, and PingDataGovernance.
  
• Experience with Identity Governance & Administration (IGA) platforms such as SailPoint IdentityNow/ISC.
  
• Understanding of Zero Trust Architecture and security best practices.
  
• CI/CD pipeline configuration for Ping deployments and configuration promotion (e.g., Jenkins, GitLab CI, Azure DevOps, or GitHub Actions).
  
• Experience with containerized Ping deployments (Docker, Kubernetes, Helm) and Infrastructure-as-Code (Terraform, Ansible).
  
• Ping Identity, Okta, SailPoint, or cybersecurity certifications (e.g., PingFederate/PingDirectory certifications, CISSP, etc.).
  
• Experience working in regulated environments (e.g., HIPAA, SOX, GDPR compliance).
  
• Exposure to other IAM tools like CyberArk, ForgeRock, or Okta is a plus.
  
• Competency in security frameworks including NIST CSF, NIST 800-53, ISO 27001, SOX.
  
• Retail and/or grocery industry experience a plus.
  

Benefits