Senior Identity Access Management Engineer - PingOne

Responsibilities

• Executes the implementation and maintenance of complex Identity & Access Management (IAM) infrastructure.
• Responsible for the planning and execution of projects and programs from an IAM perspective, ensuring they meet business requirements, security standards and deadlines.
• Automate and optimize IAM processes.
• Integrate Entra  enterprise systems and third‑party applications.
• Collaborate with cross‑functional teams to support and drive IAM program goals.
• Monitor and troubleshoot IAM infrastructure, ensuring optimal performance, reliability and security.
• Document and maintain comprehensive IAM infrastructure designs and processes.
• Implement and enforce best practices for IAM security, compliance and governance.
• Mentor junior team members.
• Participate in an on‑call rotation.

• 4 years of relevant experience required.
• Bachelor's degree is required; combination of relevant experience, education and training may be accepted in lieu of a degree.
• Preferred:
  Degrees in Computer Science, Information Technology or a related field.
• Hands‑on experience with IAM technologies and frameworks.
• Technical competencies:
  Ping One platform administration, including Davinci orchestration; experience registering applications in Ping Entra ; scripting with Python or Bash;
  Azure Active Directory and Power Shell.
• Knowledge of SAML, OAuth and OpenID Connect.
• Experience with Role‑Based Access Control (RBAC).
• Experience with Entra B2B, Entra External Identity, JWT, and API.

CLA is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, disability status, protected veteran status, national origin, or any other characteristics protected by law.

If you require a reasonable accommodation during the application process, please contact myp