Location: Remote (India)

Position: Full Time

Availability: Immediate Joiner

Role Overview

We are seeking an authoritative Level 3 Identity & Access Management (IAM) Engineer specializing in Single Sign-On (SSO) and enterprise federation across PingFederate and Microsoft Entra ID (Azure AD). Serving as the technical Subject Matter Expert (SME) and final escalation point, you will spearhead mission-critical incident resolution, zero-trust authentication architecture, protocol-level integrations, and operational automation for a complex, hybrid enterprise identity environment.

Key Responsibilities

• L3 Escalation & Root Cause Engineering: Act as the final technical escalation authority for high-severity (P1/P2) authentication, token-issuance, and federation outages across PingFederate and Entra ID. Conduct deep-dive trace analysis and author comprehensive Root Cause Analyses (RCA) to drive permanent remediation.
• Enterprise Identity Architecture & Design: Lead the architectural design, high-availability clustering, upgrades, and continuous optimization of enterprise PingFederate and Microsoft Entra ID environments in alignment with Zero Trust principles.
• Complex Federation & Protocol Integration: Architect, configure, and onboard complex Service Provider (SP) and Identity Provider (IdP) integrations utilizing SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and WS-Federation, including custom PingFederate authentication policies, OGNL expressions, adapters, and Entra ID Enterprise App registrations.
• Zero-Trust Security & Access Governance: Design and enforce granular Conditional Access policies, Phishing-Resistant MFA, Privileged Identity Management (PIM), and Role-Based Access Control (RBAC) to meet strict enterprise security and compliance mandates.
• IAM Automation & Tooling: Engineer robust PowerShell and REST API/Microsoft Graph automation scripts to eliminate manual toil across certificate rotations, application onboarding, synchronization monitoring, and user lifecycle workflows.
• Cross-Functional Leadership & Documentation: Partner closely with application architects, InfoSec, DevOps, and vendor engineering teams (Ping Identity / Microsoft Premier Support). Author high-level architectural blueprints, Standard Operating Procedures (SOPs), and runbooks while mentoring L1/L2 IAM operations engineers.

Required Platform & Technical Skills

• PingFederate Mastery: Proven L3 expertise in deploying, configuring, and troubleshooting PingFederate clusters, custom authentication selectors/adapters, OAuth/OIDC token managers, OGNL attribute mapping, and SSL/signing certificate lifecycle management.
• Microsoft Entra ID (Azure AD) Expertise: Deep hands-on experience managing Enterprise Applications, App Registrations (SAML/OIDC), Conditional Access, PIM, Entra Connect synchronization rules/filtering, and custom RBAC configurations.
• Protocol & Diagnostics Fluency: Expert-level understanding of SAML assertions, JWT tokens, OAuth grant types, and HTTP header/SAML tracer debugging.
• Automation & Scripting: Strong proficiency in PowerShell (Microsoft Graph SDK / AzureAD modules) and REST APIs for operational automation and reporting.
• Ping Identity Ecosystem (Strong Plus): Hands-on experience with PingAccess, PingDirectory, or PingOne for reverse-proxy access management and hybrid identity orchestration.

Preferred Certifications (Bonus)

• Microsoft Certified: Identity and Access Administrator Associate (SC-300)
• Ping Identity Certified Professional – PingFederate
• Certified Information Systems Security Professional (CISSP) or Certified Identity and Access Manager (CIAM)