IAM Engineer (PingFed)

We are seeking a Senior Identity DevOps Engineer / IAM Architect to design, implement, support, and modernize our Identity and Access Management (IAM) environment. This role will lead our migration from PingFederate 11.3 to PingOne Workforce (SaaS) while supporting our Zero Trust security strategy.

The ideal candidate has deep hands-on experience with Ping Identity technologies and is capable of engineering custom solutions—not just supporting existing applications. This includes developing custom authentication flows, scripting, federation integrations, and modernizing legacy PingFederate implementations.

Responsibilities

Design, implement, and support enterprise IAM and SSO solutions using Ping Identity technologies.

Lead the migration from PingFederate to PingOne Workforce.

Develop custom authentication policies, profiles, scripting, and automation.

Build and support custom PCVs, data stores, and federation integrations.

Evaluate and simplify legacy PingFederate implementations.

Integrate applications using SAML, OAuth 2.0, OpenID Connect (OIDC), and Microsoft Entra ID.

Support enterprise SSO, MFA, and application onboarding initiatives.

Automate deployments and operational tasks using Infrastructure as Code and scripting.

Troubleshoot complex authentication and federation issues.

Collaborate with security, infrastructure, and application teams to deliver secure, scalable IAM solutions.

Required Qualifications

5–7+ years of hands-on IAM engineering experience.

Expert knowledge of: PingFederate

PingOne SSO

PingOne MFA

PingOne DaVinci

Experience designing and building custom PingFederate solutions, including: Authentication policies and profiles

Custom scripting

Java/J2EE custom adapters

PCVs

Data stores

Federation integrations

Experience migrating from PingFederate to PingOne Workforce or similar cloud IAM platforms.

Strong knowledge of Zero Trust principles and modern authentication protocols (SAML, OAuth 2.0, OIDC).

Experience integrating Microsoft 365 and Microsoft Entra ID.

Experience with Python, PowerShell, or shell scripting.

Experience with GKE, Terraform, Helm, Git, Jenkins, Docker, and Kubernetes.

Strong troubleshooting, production support, and problem-solving skills.

Preferred Qualifications

PingCentral

PingOne Protect

Google Cloud Platform (GCP)

Oracle Identity Manager (OIM) or Oracle Access Governance (OAG)

Experience with additional enterprise IAM platforms

Ping Identity or related security certifications

Discover some of the global benefits that empower our people to become the best version of themselves:

Finance: Competitive salary package, share plan, company performance bonuses, value-based recognition awards, referral bonus;

Career Development: Career coaching, global career opportunities, non-linear career paths, internal development programmes for management and technical leadership;

Learning Opportunities: Complex projects, rotations, internal tech communities, training, certifications, coaching, online learning platforms subscriptions, pass-it-on sessions, workshops, conferences;

Work-Life Balance: Hybrid work and flexible working hours, employee assistance programme;

Health: Global internal wellbeing programme, access to wellbeing apps;

Community: Global internal tech communities, hobby clubs and interest groups, inclusion and diversity programmes, events and celebrations.

Additional Employee Requirements

Participation in both internal meetings and external meetings via video calls, as necessary.

Ability to go into corporate or client offices to work onsite, as necessary.

Prolonged periods of remaining stationary at a desk and working on a computer, as necessary.

Ability to bend, kneel, crouch, and reach overhead, as necessary.

Hand-eye coordination necessary to operate computers and various pieces of office equipment, as necessary.

Vision abilities including close vision, toleration of fluorescent lighting, and adjusting focus, as necessary.

For positions that require business travel and/or event attendance, ability to lift 25 lbs, as necessary.

For positions that require business travel and/or event attendance, a valid driver’s license and acceptable driving record are required, as driving is an essential job function.

*If requested, reasonable accommodations will be made to enable employees requiring accommodations to perform the essential functions of their jobs, absent undue hardship.

USA Benefits (Full time roles only, does not apply to contractor positions)

Robust healthcare and benefits including Medical, Dental, vision, Disability coverage, and various other benefit options

Flexible Spending Accounts (Medical, Transit, and Dependent Care)

Employer Paid Life Insurance and AD&D Coverages

Health Savings account paired with our low-cost High Deductible Medical Plan

401(k) Safe Harbor Retirement plan with employer match with immediately vest

At Endava, we’re committed to creating an open, inclusive, and respectful environment where everyone feels safe, valued, and empo…