24 Sep
|
Capgemini
|
Bengaluru
24 Sep
Capgemini
Bengaluru
Identity & Access Management Engineer Ping Identity (PingFederate, PingAccess, PingOne DaVinci)
About the Role
We are seeking an experienced Identity & Access Management (IAM) Engineer to design, implement, and support enterprise identity solutions built on the Ping Identity platform. The ideal candidate has hands-on expertise with PingFederate, PingAccess, and PingOne DaVinci, and can architect secure, scalable authentication and authorization workflows across cloud and on-premises environments.
Key Responsibilities
- Configure, deploy, and maintain PingFederate for SSO, federation (SAML 2.0, OAuth 2.0, OIDC), and identity bridging across internal and external applications.
- Implement and manage PingAccess policies for web access management, reverse proxy configurations, and API/application protection.
- Build and optimize authentication journeys, orchestration flows, and adaptive/risk-based policies using PingOne DaVinci.
- Integrate Ping solutions with directory services (Active Directory, LDAP), IdPs/SPs, MFA providers, and downstream applications.
- Develop and maintain custom adapters, connectors, and policy contracts within the Ping ecosystem.
- Troubleshoot authentication, federation, and authorization issues across PingFederate,
PingAccess, and DaVinci flows.
- Collaborate with security, application, and infrastructure teams to define IAM requirements and ensure compliance with security standards (NIST, Zero Trust, etc.).
- Create and maintain technical documentation, runbooks, and architecture diagrams.
Required Qualifications
- 3+ years of hands-on experience with PingFederate (federation, SSO, token management, adapters).
- 2+ years of experience with PingAccess (policy configuration, reverse proxy, API protection).
- Practical experience building flows in PingOne DaVinci (orchestration, connectors, no-code/low-code authentication journeys).
- Robust understanding of identity protocols: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), WS-Fed.
- Experience integrating with directory services (Active Directory, LDAP) and MFA solutions.
- Familiarity with REST APIs and scripting (Python, PowerShell, or Java) for automation and custom integrations.
- Solid understanding of security best practices, Zero Trust principles, and risk-based authentication.
- Strong troubleshooting skills across distributed, multi-tier systems.
📌 Ping Engineer (Bengaluru)
🏢 Capgemini
📍 Bengaluru