IAM Engineer (PingFed)

We are seeking a Senior Identity DevOps Engineer / IAM Architect to design, implement, support, and modernize our Identity and Access Management (IAM) environment. This role will lead our migration from PingFederate 11.3 to PingOne Workforce (SaaS) while supporting our Zero Trust security strategy.

The ideal candidate has deep hands-on experience with Ping Identity technologies and is capable of engineering custom solutions—not just supporting existing applications. This includes developing custom authentication flows, scripting, federation integrations, and modernizing legacy PingFederate implementations.

Responsibilities

• Design, implement, and support enterprise IAM and SSO solutions using Ping Identity technologies.
• Lead the migration from PingFederate to PingOne Workforce.
• Develop custom authentication policies, profiles, scripting, and automation.
• Build and support custom PCVs, data stores, and federation integrations.
• Evaluate and simplify legacy PingFederate implementations.
• Integrate applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and Microsoft Entra ID.
• Support enterprise SSO, MFA, and application onboarding initiatives.
• Automate deployments and operational tasks using Infrastructure as Code and scripting.
• Troubleshoot complex authentication and federation issues.
• Collaborate with security, infrastructure, and application teams to deliver secure, scalable IAM solutions.

Required Qualifications

• 5–7+ years of hands-on IAM engineering experience.
• Expert knowledge of:
  • PingFederate
  • PingOne SSO
  • PingOne MFA
  • PingOne DaVinci
• Experience designing and building custom PingFederate solutions, including:
  • Authentication policies and profiles
  • Custom scripting
  • Java/J2EE custom adapters
  • PCVs
  • Data stores
  • Federation integrations
• Experience migrating from PingFederate to PingOne Workforce or similar cloud IAM platforms.
• Strong knowledge of Zero Trust principles and modern authentication protocols (SAML, OAuth 2.0, OIDC).
• Experience integrating Microsoft 365 and Microsoft Entra ID.
• Experience with Python, PowerShell, or shell scripting.
• Experience with GKE, Terraform, Helm, Git, Jenkins, Docker, and Kubernetes.
• Strong troubleshooting, production support, and problem-solving skills.

Preferred Qualifications

• PingCentral
• PingOne Protect
• Google Cloud Platform (GCP)
• Oracle Identity Manager (OIM) or Oracle Access Governance (OAG)
• Experience with additional enterprise IAM platforms
• Ping Identity or related security certifications

Discover some of the global benefits that empower our people to become the best version of themselves:

• Finance: Competitive salary package, share plan, company performance bonuses, value-based recognition awards, referral bonus;   
• Career Development: Career coaching, global career opportunities, non-linear career paths, internal development programmes for management and technical leadership;
• Learning Opportunities: Complex projects, rotations, internal tech communities, training, certifications, coaching, online learning platforms subscriptions, pass-it-on sessions, workshops, conferences;
• Work-Life Balance: Hybrid work and flexible working hours, employee assistance programme;
• Health: Global internal wellbeing programme, access to wellbeing apps;
• Community: Global internal tech communities, hobby clubs and interest groups, inclusion and diversity programmes, events and celebrations.

Additional Employee Requirements  

• Participation in both internal meetings and external meetings via video calls, as necessary. 
• Ability to go into corporate or client offices to work onsite, as necessary. 
• Prolonged periods of remaining stationary at a desk and working on a computer, as necessary. 
• Ability to bend, kneel, crouch, and reach overhead, as necessary. 
• Hand-eye coordination necessary to operate computers and various pieces of office equipment, as necessary. 
• Vision abilities including close vision, toleration of fluorescent lighting, and adjusting focus, as necessary. 
• For positions that require business travel and/or event attendance, ability to lift 25 lbs, as necessary. 
• For positions that require business travel and/or event attendance, a valid driver’s license and acceptable driving record are required, as driving is an essential job function.

*If requested, reasonable accommodations will be made to enable employees requiring accommodations to perform the essential functions of their jobs, absent undue hardship.   

USA Benefits (Full time roles only, does not apply to contractor positions)

• Robust healthcare and benefits including Medical, Dental, vision, Disability coverage, and various other benefit options  
• Flexible Spending Accounts (Medical, Transit, and Dependent Care)  
• Employer Paid Life Insurance and AD&D Coverages  
• Health Savings account paired with our low-cost High Deductible Medical Plan  
• 401(k) Safe Harbor Retirement plan with employer match with immediately vest   

At Endava, we’re committed to creating an open, inclusive, and respectful environment where everyone feels safe, valued, and empowered to be their best. We welcome applications from people of all backgrounds, experiences, and perspectives—because we know that inclusive teams help us deliver smarter, more innovative solutions for our customers. Hiring decisions are based on merit, skills, qualifications, and potential. If you need adjustments or support during the recruitment process, please let us know.