PING SME - Ping Lead​/Architect - PING Certified SMEs

Looking for PING identity Certified SMES (PIngOne-Davinci, Ping Risk, PingMFA: Ping One Advances Services
- Ping Directory & Ping Federate). This position requires a solid understanding of web application security and architecture, cloud deployment strategies, excellent debugging and troubleshooting skills, as well as strong analytical and problem solving capabilities. The ideal candidate needs to have enterprise security experience, strong interpersonal and communication skills, a dedicated work ethic, and the ability to learn new technologies quickly.

• Work with internal and client-side resources to deploy and support Ping Access, Ping Federate & Ping Directory, & PingID in high-availability environments
• Plan and execute migrations from 3rd party IAM vendors to the Ping Identity platform
• Develop strategy and deployment plans for extending the reach of the Ping product suite to additional applications
• Analyze and plan significant infrastructure updates and product upgrades
• Respond to client calls for assistance with Ping related issues
• Assist clients with scalability planning for future security needs
• Develop design and architectural diagrams that clearly communicate the proposed solution and flows
• Work with internal and Ping technical teams to document and validate IAM architecture and flows.
• Actively participate in the cross-functional team meeting, developing project plans, implementation, testing, pre / post go-live activities, risk management and issue management

• Bachelor of Science in Computer Science, Mathematics or a related discipline, or commensurate professional experience
• Hands-on experience with the Ping Identity Platform, SSO, user directories, and web access management technologies
• Strong understanding of federation technologies such as oAuth, OpenID Connect & SAML
• Experience in installing and configuration of Ping Federation is required
• Experience in configuring SSO using various standard and legacy authentication protocols is required
• Experience with most standard network security protocols (Eg: OAuth, OAuth2, OIDC, WS-Fed, WS-Trust, SAML, LDAP) is required
• Hands-on experience in these areas:
  Identity Management, Access Management, Federation, Single Sign-On, API gateways, Directory Services technologies
• Demonstrated expertise deploying identity technologies on industry leading cloud platforms (Microsoft Azure preferred)

• Ability to work in team-oriented environment where collaboration is encouraged and valued
• Self-direction and independent problem-solving
• Ability to combine data and knowledge from various sources to determine the proper approach for planning and execution
• Ability to accept constructive criticism and debate opposing viewpoints in order to arrive at the best solution for the client
• Demonstrated working knowledge of web servers, clients and browsers, LDAP directories, and Oracle or Microsoft Server databases
• Knowledge of common network services and protocols such as TCP/IP, DNS, SSH, HTTPS, VPN
• Solid Windows & Unix skills
• Demonstrated knowledge of common programming practices
• Excellent written and verbal communication skills
• Experience with IAM strategies and architecture
• Experience with building custom SP and IDP adapters in Ping Federate desired
• Experience setting Azure AD, VPN, windows/server logins and other login-level and app-level MFA scenarios
• Experience with Web application servers, SAML, XML, SOAP and web services is strongly preferred
• Network topology design, security, performance and fault tolerant architecture experience is a plus