Identity Platform Engineer

- Design and execute identity-based access control policies in accordance with Zero Trust principles (Never Trust, Always Verify) - Oversee the deployment, configuration, and enhancement of PingFederate and Ping Access to facilitate seamless Single Sign-On (SSO) and attribute-based access control (ABAC) - Manage the complete lifecycle of Identity, Credential, and Access Management (ICAM), encompassing automated provisioning and intricate directory integrations - Collaborate with Security Operations Center (SOC) and Network teams to weave identity signals into our comprehensive security monitoring and incident response processes - Serve as the expert for integrating PingFederate as the primary Identity Provider (IdP) with third-party Zero Trust ecosystem elements, including Privileged Access Manager (PAM), Master User Record (MUR), and Identity Governance and Administration (IGA) - Develop and uphold authentication policies, incorporating Multi-Factor Authentication (MFA) and Risk-Based Authentication (RBA) - Exhibit knowledge of directory services (Active Directory, LDAP, Azure AD) - Understand NIST 800-207 Zero Trust Architecture standards - Maintain a security-focused mindset with the capability to troubleshoot intricate authentication handshakes - Provide direction and practical training for integrating new applications into PingFederate utilizing self-service templates, OIDC, and SAML to ensure uniform security protocols across the enterprise