← All open roles
Authentication and Access Management Developer, Ping Identity Suite
Lead the Ping Identity Suite (PingFederate, PingAccess, PingOne, PingID). The estate covers approximately 125 SSO-enabled applications, 140+ integrations, and 7,000 daily authentication events, with major Ping upgrades and new SSO onboarding expected during the term.
What you'll do
- Serve as the technical lead for all Ping Suite applications in the environment
- Implement PingFederate integration kits across Microsoft IIS, Apache HTTP Server, Apache Tomcat, IBM WebSphere, and Oracle WebLogic
- Work across .NET, Java, PHP, Perl, and Python application stacks at the integration layer
- Deploy PingAccess as the rules and risk engine evaluating user access against policy (identity role/attribute, network range, time, authentication level, session, OAuth scopes and attributes)
- Use PingAccess to deploy identity and session data in JWTs, providing stateful-like behavior over stateless mechanisms
- Prefer pre-built Ping connectors, adapters, and templates wherever possible
- Partner with application administrators and business owners to deploy, govern, and extend authentication and authorization services
- Apply Ping security patches and perform occasional version upgrades
- Capture user-reported issues, document the path to resolution, and produce runbooks
- Support bi-weekly Wednesday 5:00 p.m. ET sprint deployments and occasional Saturday morning maintenance
What we need from you
- 5+ years hands-on with the Ping Identity Suite (PingFederate primary; PingAccess, PingOne, PingID secondary)
- Strong working knowledge of SAML 2.0, OAuth 2.0, OIDC, SSO, and SLO
- Hands-on integration kit deployment across IIS, Apache (HTTPD and Tomcat), WebSphere, and WebLogic
- Working familiarity with .NET, Java, PHP, Perl, and Python at the integration layer
- Production runbook authoring; troubleshooting across the Ping stack
- Must work U.S. Eastern business hours, 9 a.m. to 5 p.m. ET; offshore candidates welcome
- Available to start July 1, 2026 dedicated full-time to a single client for the 3-year contract term
Bonus, not required
- Ping Identity Certified Professional (PingFederate or PingAccess)
- Prior CIAM exposure
- Experience leading a Ping major version upgrade in production
What you'll get
Competitive base plus utilization and performance bonuses. Full medical, dental, vision, 401(k) with match, paid Ping certifications, and conference sponsorship.