Domain – IAM - Single Sign-on (PingFederate/PingIdentity/MS Entra)

Sub Domain – Single Sign-on

Overview:

A Level 3 Engineer in Single Sign-On (SSO) technologies for PingFederate and Azure Entra platforms is a subject matter expert (SME) responsible for the advanced support, design, implementation, and continuous improvement of complex identity and access management (IAM) solutions. This role is the final point of escalation for technical issues and involves significant collaboration with architecture and development teams.

Roles and Responsibilities

- Incident and Problem Resolution: Act as the final point of escalation for complex, high-severity incidents related to SSO, federation, and authentication issues across PingFederate and Azure Entra ID. This includes performing root cause analysis (RCA) to eliminate recurring problems.
- System Architecture and Design: Participate in or lead the design, implementation, and enhancement of the enterprise-level PingFederate and Azure Entra ID platforms. This involves translating business needs into secure and workable technology solutions.
- Configuration and Integration: Design and manage configurations for identity federation, including Service Provider (SP) and Identity Provider (IdP) connections using protocols such as SAML 2.0, OAuth 2.0, and OpenID Connect. This engineer manages application registrations in Entra ID and configures adapters in PingFederate.
- Security and Compliance: Implement and enforce security measures such as Conditional Access, Multi-Factor Authentication (MFA),



and Privileged Identity Management (PIM). The engineer ensures all integrations and configurations align with corporate security policies and industry’s best practices.
- Automation and Process Improvement: Develop automation solutions using scripting languages like PowerShell to streamline routine management, monitoring, and user management tasks. They also identify operational opportunities for continuous improvement.
- Documentation and Mentorship: Create and maintain detailed architectural diagrams, technical documentation (SOPs), and knowledge base articles. The engineer also mentors junior team members (L1 and L2 support) and provides technical guidance.
- Collaboration: Work closely with cross-functional teams including application owners, security teams, DevOps, and Microsoft Premier Support to align IAM requirements with business objectives and ensure seamless integration and project delivery.

Platform-Specific Skills (Desired)

Platform

Key Skills and Responsibilities

PingFederate

Designing, configuring, and maintaining identity federation solutions; implementing custom authentication policies and adapters; ensuring high availability and scalability of services.

Microsoft Entra ID (Azure)

Administering application registrations (OIDC, SAML); configuring Conditional Access and PIM; managing synchronization rules via Entra Connect; administering roles and RBAC.

PingAccess / Ping Identity

Added knowledge of PingAccess and other PingIdentity solutions

📌 Identity Management Consultant (India)
🏢 SISL Global
📍 India