Ping Federate and Ping directory

Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you. Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees. Job seeker Video Testimonials Employee Glassdoor Reviews If you are a Ping Federate & Directory Consultant, looking for excitement, challenge and stability in your work, then you would be glad to come across this page. We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details. Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution. Role: Ping Federate & Directory Location: HYDERABAD | BANGALORE | PUNE | CHENNAI | MUMBAI | GURUGOAN | KOLKOTTA Experience: 5 - 8Years Employment Type: Contract to hire Work Mode:Hybrid Notice Period:0-15 days (If you have negotiable notice period or buyout option, please apply) Requirements Job Summary: Kroger project: we are looking for a Senior IAM Engineer – Ping Identity (PingFederate & PingDirectory) with deep, hands-on implementation experience in PingFederate and PingDirectory to join our IAM team. The ideal candidate should have at least 5 years of experience in IAM solution design, implementation, and support, strong IAM and federation fundamentals, and a proven ability to deliver end-to-end Ping deployments and work across cross-functional teams. Hands-on experience with PingFederate, PingDirectory, Active Directory, Okta/Azure AD, and a collaborative, leadership mindset are highly valued. Key Responsibilities: Design, install, configure, implement, and maintain PingFederate (clustered, highly available deployments) for enterprise SSO and federation. Design, deploy, and operate PingDirectory (LDAP/SCIM directory services), including schema design, replication topology, indexing, data migration, and performance tuning. Configure and onboard applications to PingFederate using SAML 2.0, OAuth 2.0, and OpenID Connect, including adapters, authentication policies, access token managers, and attribute mappings. Build and customize PingFederate integrations: IdP and SP connections, authentication selectors, password credential validators, OAuth client management, and custom Java-based plugins/adapters as needed. Integrate PingFederate and PingDirectory with Active Directory/LDAP, Azure AD, Okta, HR systems, and other identity providers and data sources. Lead IAM implementation initiatives from requirements and design through build, testing, cutover, and production support. Drive automation of IAM deployment and administration using scripting (Python, Shell, PowerShell), Ping Admin APIs, and CI/CD pipelines. Collaborate with Security, HR, IT Ops, and Application teams to ensure a scalable, secure IAM architecture. Act as a technical mentor and lead for junior engineers and support teams. Support identity lifecycle processes and participate in IAM risk assessments and internal/external audits, ensuring compliance with regulatory requirements such as SOX and GDPR. Develop and implement policies, procedures, and standards related to IAM lifecycle, authentication, federation, and entitlement management. Provide technical leadership and mentorship to other team members on PingFederate, PingDirectory, Okta, Azure AD, etc. Enables single sign-on (SSO), federation, and MFA/passwordless services to provide secure and seamless user experiences Designs and automates authentication and authorization flows for all identities across Kroger, including workforce, partner, and customer use cases Collaborates with IT and business stakeholders to define and implement IAM solutions related to authentication and access controls that improve Kroger's cybersecurity processes and end-user experiences Drives continuous improvement of authentication and authorization processes Provides subject matter expertise to business areas who are managing their own control environment in regards to authentication and access controls Collaborates with the Cybersecurity GRC team to ensure IAM-related policies and standards are kept up-to-date and aligned to applicable compliance requirements Develops IAM business processes, risk and controls based on industry best practices and applicable compliance requirements Develops and maintains monitoring, patching, backup/DR, and upgrade processes for Ping platforms Required Qualifications: 5-6+ years of experience in IAM engineering, implementation, architecture, and support. 3+ years of hands-on implementation experience with PingFederate (installation, clustering, SSO/federation configuration, application onboarding, upgrades, and production support). 2+ years of hands-on implementation experience with PingDirectory (deployment, schema and replication design, data migration/synchronization, performance tuning, and support). Strong experience with federation and authentication standards: SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, and FIDO2. Experience integrating Ping with Active Directory/LDAP, Azure AD/Entra ID, Okta, HRIS systems, and SaaS/enterprise applications. Proficiency in Java (custom adapters/plugins), REST APIs, and scripting (Python, Shell, or PowerShell); experience with the PingFederate and PingDirectory admin APIs. Experience with load balancers, PKI/certificate management, and TLS/SSL configuration in IAM environments. Strong understanding of IAM principles, including RBAC, ABAC, MFA, passwordless authentication, and privileged access. Experience supporting Ping deployments in Linux and cloud/hybrid environments (AWS, Azure, or GCP). Ability to work in Agile environments and lead sprint-based IAM delivery efforts. Excellent communication, documentation, and collaboration skills, with the ability to clearly communicate technical concepts to both technical and non-technical audiences. Ability to translate business requirements into technical designs, detailed requirements, and architecture models. Preferred Skills & Good to Have: Experience with other Ping Identity products such as PingAccess, PingID, PingOne, and PingDataGovernance. Experience with Identity Governance & Administration (IGA) platforms such as SailPoint IdentityNow/ISC. Understanding of Zero Trust Architecture and security best practices. CI/CD pipeline configuration for Ping deployments and configuration promotion (e.g., Jenkins, GitLab CI, Azure DevOps, or GitHub Actions). Experience with containerized Ping deployments (Docker, Kubernetes, Helm) and Infrastructure-as-Code (Terraform, Ansible). Ping Identity, Okta, SailPoint, or cybersecurity certifications (e.g., PingFederate/PingDirectory certifications, CISSP, etc.). Experience working in regulated environments (e.g., HIPAA, SOX, GDPR compliance). Exposure to other IAM tools like CyberArk, ForgeRock, or Okta is a plus. Competency in security frameworks including NIST CSF, NIST 800-53, ISO 27001, SOX. Retail and/or grocery industry experience a plus. Benefits Visit us at http://alignity.io/careers. Alignity Solutions is an Equal Opportunity Employer, M/F/V/D. CEO Message: Click Here Clients Testimonial: Click Here