Senior Identity (Ping) Engineer

About Our Goal

Treat our consultants and clients the way we would like others to treat us!

Interested in joining our team? Check out the opportunity below and apply today!

Opportunity

Contract opening in Tysons, VA for a highly skilled and experienced Senior Identity (Ping) Engineer to be the subject matter expert and technical lead for our enterprise-wide Ping Identity platform. This critical role is responsible for designing, deploying, and maintaining highly secure, scalable, and frictionless Identity and Access Management (IAM) solutions for both our internal workforce and our external customers (CIAM).

Location

Combination of onsite and remote. Candidate must be working onsite 3 days/week at the office in Tysons, VA.

The ideal candidate possesses deep, hands-on expertise across the full Ping Identity product suite, with a proven track record of leading complex IAM projects at the enterprise level, advanced troubleshooting skills, and a strong understanding of modern, passwordless authentication standards like FIDO2/Passkeys.

Key Responsibilities

Platform Leadership & Architecture

• Lead the architectural design, planning, and scaling of Ping Identity solutions for both Workforce SSO and Customer Identity and Access Management (CIAM) environments, covering on-premise, private cloud, and SaaS (PingOne) architectures.

Expert Deployment & Configuration

• Perform extensive, hands-on deployment, configuration, and integration of the core Ping Identity product suite, including:
  • Workforce Use Cases: Ping Federate, PingID, Ping Directory, Ping Central, PingOne for Enterprise.
  • CIAM Use Cases: PingOne for Customer, PingOne MFA, PingOne Protect, PingOne Verify, Ping Federate, Ping Directory.

Identity Orchestration

• Design, implement, and support complex identity journeys and workflows using PingOne DaVinci (or similar identity orchestration engines).

Modern Authentication Leadership

• Crucially, lead the deployment and management of Passkey/Passwordless authentication at scale, ensuring strict adherence to FIDO2/WebAuthn standards.

Project Execution

• Serve as the technical lead on multiple, simultaneous IAM projects, demonstrating the ability to work independently, drive milestones, communicate status, and ensure successful delivery.

Advanced Troubleshooting

• Perform advanced troubleshooting and root cause analysis for complex platform issues and user access problems across the entire Ping Identity stack.

Ecosystem Integration

• Provide expertise and integration support for our broader identity ecosystem, specifically including Microsoft Azure Identity (Entra ID) and other related Identity Provider (IdP) technologies.

Required Skills and Experience

• 7+ years of progressive experience in Identity & Access Management (IAM) engineering and architecture.
• 5+ years of hands-on experience designing, implementing, and supporting the Ping Identity platform in large-scale enterprise and/or CIAM environments.
• Deep, demonstrable expertise with the full Ping product suite, as outlined in the responsibilities above.
• Proven track record of project experience leading and executing large-scale, enterprise Ping deployments.
• Expert-level knowledge of IAM protocols: SAML, OAuth 2.0, OpenID Connect (OIDC), SCIM, and LDAP.
• Exceptional written and verbal communication skills, with a proven ability to articulate complex technical concepts to both technical and non-technical team members.

Highly Desired Qualifications

• Advanced Ping Identity Certifications: Holding one or more of the following is highly valued, demonstrating expertise in complex deployments and troubleshooting:
  • PingFederate Certified Professional or Expert
  • PingDirectory Certified Professional or Expert
  • PingOne Advanced Identity Cloud Certified Professional
• Hands-on experience designing workflows using PingOne DaVinci.
• Core experience with Microsoft Azure Identity (Entra ID) for federation, conditional access, and identity governance.
• Scripting/Automation proficiency (e.g., Python, PowerShell, Groovy) for automating Ping administration and integration tasks.
• Nice to have: Experience with Descope IAM in building Identity automations