Airitos

Job Description: IAM Ping Identity Engineer (Contract)

Location: Remote, US-based (must be authorized to work in the United States)
Engagement Type: Independent Contractor / W2 Contract
Duration: 6 months, with potential to extend
Industry: Financial Services

About the Role

We are looking for an experienced IAM Ping Identity Engineer to join a large financial services organization on a contract basis. You will work within a mature, compliance-driven environment to support the design, implementation, and ongoing operations of the organization's identity and access management infrastructure. This role is well-suited for someone who has hands-on Ping product experience and is comfortable operating under the governance and change management standards typical of regulated industries.

Key Responsibilities

• Design, configure, and maintain Ping Identity solutions including PingFederate, PingAccess, and PingDirectory
• Administer and troubleshoot SSO, federation, and authentication integrations across enterprise applications
• Support OAuth 2.0, OIDC, and SAML-based integrations with internal and external service providers
• Participate in the full IAM lifecycle including onboarding, access provisioning, and deprovisioning workflows
• Collaborate with application teams, security architects, and infrastructure teams to integrate applications with the Ping ecosystem
• Maintain documentation for configurations, runbooks, and change requests in alignment with change management policies
• Assist with audits, compliance reviews, and evidence gathering for regulatory requirements (SOX, PCI-DSS, or similar)
• Identify and remediate security vulnerabilities or misconfigurations within the IAM environment
• Support incident triage and resolution for authentication and access-related issues

Required Qualifications

• 4-7 years of experience in Identity and Access Management
• 3+ years of hands-on experience with Ping Identity products (PingFederate required; PingAccess and PingDirectory a strong plus)
• Solid understanding of federation protocols: SAML 2.0, OAuth 2.0, and OIDC
• Experience working in regulated environments such as financial services, healthcare, or government
• Familiarity with LDAP/Active Directory and directory services integration
• Working knowledge of MFA solutions and adaptive authentication policies
• Experience with change management processes and operating within ITSM frameworks (ServiceNow or equivalent)
• Ability to work independently and manage deliverables with limited day-to-day supervision

Preferred Qualifications

• Ping Identity certifications (PingFederate Engineer, etc.)
• Experience with CyberArk, SailPoint, or other PAM/IGA platforms
• Exposure to cloud IAM patterns (AWS IAM, Azure AD/Entra ID)
• Scripting or automation experience (Python, PowerShell, or Bash) for IAM workflows
• Familiarity with SOX, PCI-DSS, or FFIEC compliance frameworks

Contractor Requirements

• Must be based in the United States and authorized to work without sponsorship
• Must be able to pass a background check, including financial background screening
• Corp-to-Corp (C2C) or W2 engagements considered; no third-party C2C without prior approval