PingOne Advanced Identity Cloud Architect

Company Description:

Hub City Media was established in 1+++ as a premier Identity and Access Management (IAM) consultancy. We provide a full suite of services, including expert advice, implementation assistance, and managed cloud solutions. Our team is dedicated to serving clients worldwide, offering support and expertise across all time zones.

Role Description:

We are seeking a skilled and experienced PingOne Advanced Identity Cloud Architect to design, implement, and manage scalable identity and access management (IAM) solutions. In this role, you will architect secure and efficient identity systems based on PingOne Advanced Services, ensuring robust identity governance, single sign-on (SSO), multi-factor authentication (MFA), and API security for enterprise-level clients.You will collaborate closely with cross-functional teams, including security, IT, and application development, to deliver seamless user authentication, access control, and identity federation solutions. Your expertise will be pivotal in driving IAM strategies that align with business needs while ensuring the highest standards of security and compliance.

Key Responsibilities:
• Architect & Design: Lead the design and architecture of secure identity solutions using PingOne Advanced Identity Cloud services, integrating with existing enterprise systems and applications.
• Implementation: Deploy, configure, and optimize PingOne IAM solutions including SSO, MFA, OAuth, OIDC, and other identity protocols.
• Integration: Collaborate with development and DevOps teams to ensure smooth integration of identity services with APIs, applications, and cloud environments (e.g., AWS, Azure, GCP).
• Identity Federation: Design and implement federated identity services and external identity provider integrations (e.g., SAML, SCIM, OIDC) to support external partners, customers, and employees.
• Security & Compliance: Ensure that IAM solutions comply with security best practices, data privacy regulations (e.g., GDPR, CCPA), and industry standards such as SOC 2 and ISO 27001.
• Continuous Improvement: Stay updated on the latest IAM trends, tools, and best practices, continually enhancing the architecture to meet evolving business needs.
• Troubleshooting & Support: Provide Tier 3 support for complex identity-related issues, troubleshoot integration problems, and resolve security vulnerabilities.
• Documentation & Training: Develop and maintain detailed architectural documentation, workflows, and technical specifications. Conduct training sessions for IT and security teams on best practices in identity management.
• Collaboration: Work closely with business stakeholders, project managers, and product owners to align identity management strategies with overall business objectives.

Required Qualifications:
• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field.
• 10+ years of experience in Identity and Access Management (IAM), with at least 3+ years of experience working specifically with Ping Identity solutions (PingOne Advanced Identity Cloud, PingIDM, PingAM, PingDS, PingGateway, etc.).
• Proven experience in architecting identity solutions in cloud environments (AWS, Azure, GCP) and integrating with cloud-native applications.
• Strong knowledge of IAM standards and protocols, including SAML, OAuth, OpenID Connect (OIDC), SCIM, and LDAP.
• Proficiency in securing APIs and microservices using OAuth 2.0 and OIDC.
• Solid understanding of enterprise security practices, zero trust architectures, and identity governance.
• Hands-on experience with identity federation and external identity provider configurations.
• Strong troubleshooting skills, with the ability to analyze and resolve complex identity and security issues.
• Excellent communication skills with the ability to work with technical and non-technical stakeholders.

Preferred Qualifications:
• Ping Identity certifications (e.g., Ping Accredited Mentor, Ping Accredited Consultant, etc. ).
• Experience with DevOps practices and tools (e.g., CI/CD pipelines, Terraform, Docker, Kubernetes).
• Familiarity with NIST, SOC 2, ISO 27001, and other security frameworks.
• Experience with directory services such as Active Directory (AD) or Azure AD.
• Knowledge of privacy regulations like GDPR and CCPA.