09 Nov
|
HCLTech
|
Indiranagar
09 Nov
HCLTech
Indiranagar
Job Summary
Years of Experience • 8+ years of experience in Identity and Access Management (IAM).
- 5+ years of hands‑on experience with Ping Identity products, including PingFederate and/or PingOne.
- Strong experience delivering SSO, federation, and authentication solutions in large enterprise environments.
General
Description • Lead the design, implementation, and modernization of Ping Identity solutions (PingFederate, PingOne) for workforce, partner, and application access use cases.
- Act as the solution architect and technical lead for Ping‑based IAM and authentication initiatives.
- Drive PingFederate to PingOne migration, coexistence strategies, and cloud IAM adoption.
- Participate in and lead architecture workshops, requirement‑gathering sessions, and design reviews with customers.
- Define standards, access models, and authentication policies aligned with Zero Trust architecture.
Technical
Requirements • Strong expertise in: o PingFederate architecture and adapters o PingOne services (SSO, Directory, MFA integrations) • Experience with: o Identity federation and trust relationships o API‑based integrations and REST services • Good understanding of: o Active Directory and LDAP directories o Identity lifecycle integration with IGA tools (e.g., SailPoint) • Experience integrating Ping with: o Zscaler ZPA / ZIA o Cloud and SaaS applications • Design and architect PingFederate and PingOne solutions for authentication, federation, and access management.
- Lead application onboarding and integration using: o SAML 2.0 o OAuth 2.0 o OpenID Connect (OIDC) • Design and implement: o Authentication policies o MFA orchestration (native or third‑party, e.g., HYPR) o Attribute mapping and token customization • Lead PingFederate to PingOne migration activities, including configuration mapping, phased cutover, and rollback strategies.
- Provide technical leadership during: o Design reviews o UAT o Production cutover and stabilization • Troubleshoot complex authentication, federation, and token‑related issues.
- Strong understanding of Zero Trust principles (NIST SP 800‑207) and identity‑centric security models.
- Review and approve technical designs, configurations, and implementation approaches.
- Coordinate with application, network, and security teams to resolve dependencies. Soft Skills • Excellent communication and stakeholder‑management skills, including interaction with global teams.
- Strong analytical and problem‑solving abilities for complex IAM scenarios.
- Ability to translate business and security requirements into scalable technical designs.
- Leadership mindset with a focus on quality and secure delivery.
- Client‑centric approach with strong ownership and accountability.
Certifications (Preferred) • Ping Identity Certified Professional (PingFederate / PingOne) • Certified Information Systems Security Professional (CISSP) • Any IAM or security‑related certifications are a plus Educational Qualifications • University degree in IT or/and IT Security
Key Responsibilities
Years of Experience • 8+ years of experience in Identity and Access Management (IAM).
- 5+ years of hands‑on experience with Ping Identity products, including PingFederate and/or PingOne.
- Strong experience delivering SSO, federation, and authentication solutions in large enterprise environments.
General
Description • Lead the design, implementation, and modernization of Ping Identity solutions (PingFederate, PingOne) for workforce, partner, and application access use cases.
- Act as the solution architect and technical lead for Ping‑based IAM and authentication initiatives.
- Drive PingFederate to PingOne migration, coexistence strategies, and cloud IAM adoption.
- Participate in and lead architecture workshops, requirement‑gathering sessions, and design reviews with customers.
- Define standards, access models, and authentication policies aligned with Zero Trust architecture.
Technical
Requirements • Strong expertise in: o PingFederate architecture and adapters o PingOne services (SSO, Directory, MFA integrations) • Experience with: o Identity federation and trust relationships o API‑based integrations and REST services • Good understanding of:
o Active Directory and LDAP directories o Identity lifecycle integration with IGA tools (e.g., SailPoint) • Experience integrating Ping with: o Zscaler ZPA / ZIA o Cloud and SaaS applications • Design and architect PingFederate and PingOne solutions for authentication, federation, and access management.
- Lead application onboarding and integration using: o SAML 2.0 o OAuth 2.0 o OpenID Connect (OIDC) • Design and implement: o Authentication policies o MFA orchestration (native or third‑party, e.g., HYPR) o Attribute mapping and token customization • Lead PingFederate to PingOne migration activities, including configuration mapping, phased cutover, and rollback strategies.
- Provide technical leadership during: o Design reviews o UAT o Production cutover and stabilization • Troubleshoot complex authentication, federation, and token‑related issues.
- Strong understanding of Zero Trust principles (NIST SP 800‑207) and identity‑centric security models.
- Review and approve technical designs, configurations, and implementation approaches.
- Coordinate with application, network, and security teams to resolve dependencies. Soft Skills • Excellent communication and stakeholder‑management skills, including interaction with global teams.
- Strong analytical and problem‑solving abilities for complex IAM scenarios.
- Ability to translate business and security requirements into scalable technical designs.
- Leadership mindset with a focus on quality and secure delivery.
- Client‑centric approach with strong ownership and accountability.
Certifications (Preferred) • Ping Identity Certified Professional (PingFederate / PingOne) • Certified Information Systems Security Professional (CISSP) • Any IAM or security‑related certifications are a plus Educational Qualifications • University degree in IT or/and IT Security
Skill Requirements
Years of Experience • 8+ years of experience in Identity and Access Management (IAM).
- 5+ years of hands‑on experience with Ping Identity products, including PingFederate and/or PingOne.
- Strong experience delivering SSO, federation, and authentication solutions in large enterprise environments.
General
Description • Lead the design, implementation, and modernization of Ping Identity solutions (PingFederate, PingOne) for workforce, partner, and application access use cases.
- Act as the solution architect and technical lead for Ping‑based IAM and authentication initiatives.
- Drive PingFederate to PingOne migration, coexistence strategies, and cloud IAM adoption.
- Participate in and lead architecture workshops, requirement‑gathering sessions, and design reviews with customers.
- Define standards, access models, and authentication policies aligned with Zero Trust architecture.
Technical
Requirements • Strong expertise in: o PingFederate architecture and adapters o PingOne services (SSO, Directory, MFA integrations) • Experience with: o Identity federation and trust relationships o API‑based integrations and REST services • Good understanding of: o Active Directory and LDAP directories o Identity lifecycle integration with IGA tools (e.g., SailPoint) • Experience integrating Ping with: o Zscaler ZPA / ZIA o Cloud and SaaS applications • Design and architect PingFederate and PingOne solutions for authentication, federation, and access management.
- Lead application onboarding and integration using: o SAML 2.0 o OAuth 2.0 o OpenID Connect (OIDC) • Design and implement: o Authentication policies o MFA orchestration (native or third‑party, e.g., HYPR) o Attribute mapping and token customization • Lead PingFederate to PingOne migration activities, including configuration mapping, phased cutover, and rollback strategies.
- Provide technical leadership during:
o Design reviews o UAT o Production cutover and stabilization • Troubleshoot complex authentication, federation, and token‑related issues.
- Strong understanding of Zero Trust principles (NIST SP 800‑207) and identity‑centric security models.
- Review and approve technical designs, configurations, and implementation approaches.
- Coordinate with application, network, and security teams to resolve dependencies. Soft Skills • Excellent communication and stakeholder‑management skills, including interaction with global teams.
- Solid analytical and problem‑solving abilities for complex IAM scenarios.
- Ability to translate business and security requirements into scalable technical designs.
- Leadership mindset with a focus on quality and secure delivery.
- Client‑centric approach with strong ownership and accountability.
Certifications (Preferred) • Ping Identity Certified Professional (PingFederate / PingOne) • Certified Information Systems Security Professional (CISSP) • Any IAM or security‑related certifications are a plus Educational Qualifications • University degree in IT or/and IT Security
Must Have Skill
Cortex A,Cortex XSIAM,Palo Alto Digital Experience Management (ADEM),Palo Alto Firewall
Good to Have Skill
Other Requirements
Years of Experience • 8+ years of experience in Identity and Access Management (IAM).
- 5+ years of hands‑on experience with Ping Identity products, including PingFederate and/or PingOne.
- Strong experience delivering SSO, federation, and authentication solutions in large enterprise environments.
General
Description • Lead the design, implementation, and modernization of Ping Identity solutions (PingFederate, PingOne) for workforce, partner, and application access use cases.
- Act as the solution architect and technical lead for Ping‑based IAM and authentication initiatives.
- Drive PingFederate to PingOne migration, coexistence strategies, and cloud IAM adoption.
- Participate in and lead architecture workshops, requirement‑gathering sessions, and design reviews with customers.
- Define standards, access models, and authentication policies aligned with Zero Trust architecture.
Technical
Requirements • Strong expertise in: o PingFederate architecture and adapters o PingOne services (SSO, Directory, MFA integrations) • Experience with: o Identity federation and trust relationships o API‑based integrations and REST services • Good understanding of: o Active Directory and LDAP directories o Identity lifecycle integration with IGA tools (e.g., SailPoint) • Experience integrating Ping with: o Zscaler ZPA / ZIA o Cloud and SaaS applications • Design and architect PingFederate and PingOne solutions for authentication, federation, and access management.
- Lead application onboarding and integration using: o SAML 2.0 o OAuth 2.0 o OpenID Connect (OIDC) • Design and implement: o Authentication policies o MFA orchestration (native or third‑party, e.g., HYPR) o Attribute mapping and token customization • Lead PingFederate to PingOne migration activities, including configuration mapping, phased cutover, and rollback strategies.
- Provide technical leadership during: o Design reviews o UAT o Production cutover and stabilization • Troubleshoot complex authentication, federation, and token‑related issues.
- Strong understanding of Zero Trust principles (NIST SP 800‑207) and identity‑centric security models.
- Review and approve technical designs, configurations, and implementation approaches.
- Coordinate with application, network, and security teams to resolve dependencies. Soft Skills • Excellent communication and stakeholder‑management skills, including interaction with global teams.
- Strong analytical and problem‑solving abilities for complex IAM scenarios.
- Ability to translate business and security requirements into scalable technical designs.
- Leadership mindset with a focus on quality and secure delivery.
- Client‑centric approach with strong ownership and accountability.
Certifications (Preferred) • Ping Identity Certified Professional (PingFederate / PingOne) • Certified Information Systems Security Professional (CISSP) • Any IAM or security‑related certifications are a plus Educational Qualifications • University degree in IT or/and IT Security
📌 Track Lead - Cortex XSIAM ,Cortex A, ADEM (Indiranagar)
🏢 HCLTech
📍 Indiranagar