Ping Identity Engineer

Job Title:

Senior Ping Identity Engineer

Job Description

This role focuses on designing, building and securing a new UK-hosted identity platform to support a major identity separation and security modernisation programme. You will design and implement a new internet-facing Ping Federate environment, integrate multi-factor authentication across critical services, and support Active Directory domain separation from a global shared environment to a locally managed UK platform. You will ensure identity services are resilient, compliant and aligned with UK-hosted infrastructure requirements, while improving user experience and supporting robust governance and documentation.

Responsibilities

Design, build and configure a new UK-hosted Ping Federate environment to support secure authentication services.
Deploy internet-facing Ping Federate services within a DMZ, ensuring robust security and resilience.
Design secure trust relationships between the UK Ping Federate platform and existing corporate Ping environments.
Configure SAML and OpenID Connect integrations to support application migrations onto the new identity platform.
Support the implementation and optimisation of Ping Federate, PingID and Ping Directory across the environment.
Implement Ping-based multi-factor authentication across business-critical applications to strengthen access security.
Integrate multi-factor authentication capabilities with Cyber Ark privileged access workflows.
Enable MFA-protected break-glass access to critical servers to support secure emergency access scenarios.
Support MFA integration for Cisco network device administration to secure network management access.
Migrate existing MFA solutions and proof-of-concept implementations into the strategic Ping platform.
Support identity consolidation and migration activities as part of the transition to UK-hosted services.
Assist with Active Directory migration from .COM to .NET domains, ensuring secure and seamless transitions.
Enable secure authentication for migrated users, applications and servers across the new platform.
Align identity services and configurations with UK-hosted infrastructure requirements and standards.
Implement self-service MFA credential management capabilities to improve user autonomy and reduce support overhead.
Develop and enhance user onboarding and identity lifecycle processes to improve consistency and control.
Support identity tagging and provisioning workflows to ensure accurate and efficient access management.
Produce clear and comprehensive Standard Operating Procedures to support ongoing operations.
Create Standard Work documentation to enable effective operational handover and support.
Review and improve existing runbooks and operational processes to align with the new identity platform.
Align global identity configurations and standards to ensure consistency and compliance across environments.

Essential Skills

Strong, hands-on experience with Ping Identity technologies, including Ping Federate, PingID, Ping Directory and Ping Data Sync .
In-depth knowledge of SAML 2.0, OAuth 2.0 and OpenID Connect protocols.
Proven experience designing and deploying multi-factor authentication architectures.
experience with Active Directory integration and migration, including domain separation activities.
Practical experience with RADIUS authentication services.
experience integrating identity platforms with Cyber Ark for privileged access management.
Strong understanding of DMZ and internet-facing authentication architectures.
Solid background in Identity and Access Management (IAM) principles and practices.
Ability to produce high-quality technical documentation, including SOPs, runbooks and standard work.
experience working with Windows Server and enterprise authentication technologies.
experience working with Cisco network environments in the context of secure access and MFA.Additional

Skills & Qualifications

experience in large-scale identity consolidation and migration programmes.
Exposure to identity lifecycle management, including user onboarding, provisioning and deprovisioning.
Familiarity with designing and implementing self-service credential management capabilities.
experie…