Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you. Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees.
• Job seeker Video Testimonials
• Employee Glassdoor Reviews If you are a Ping Federate & Directory Consultant, looking for excitement, challenge and stability in your work, then you would be glad to come across this page. We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details. Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution. Role: Ping Federate & Directory

Location:
HYDERABAD | BANGALORE | PUNE | CHENNAI | MUMBAI | GURUGOAN | KOLKOTTA

Experience:
5
- 8Years Employment Type: Contract to hire Work Mode:Hybrid Notice Period:0-15 days (If you have negotiable notice period or buyout option, please apply) Requirements Job Summary: Kroger project: we are looking for a Senior IAM Engineer – Ping Identity (PingFederate & PingDirectory) with deep, hands-on implementation experience in PingFederate and PingDirectory to join our IAM team. The ideal candidate should have at least 5 years of experience in IAM solution design, implementation, and support, strong IAM and federation fundamentals, and a proven ability to deliver end-to-end Ping deployments and work across cross-functional teams. Hands-on experience with PingFederate, PingDirectory, Active Directory, Okta/Azure AD, and a collaborative, leadership mindset are highly valued.

Key Responsibilities
• Design, install, configure, implement, and maintain PingFederate (clustered, highly available deployments) for enterprise SSO and federation.
• Design, deploy, and operate PingDirectory (LDAP/SCIM directory services), including schema design, replication topology, indexing, data migration, and performance tuning.
• Configure and onboard applications to PingFederate using SAML 2.0, OAuth 2.0, and OpenID Connect, including adapters, authentication policies, access token managers, and attribute mappings.
• Build and customize PingFederate integrations: IdP and SP connections, authentication selectors, password credential validators, OAuth client management, and custom Java-based plugins/adapters as needed.
• Integrate PingFederate and PingDirectory with Active Directory/LDAP, Azure AD, Okta, HR systems, and other identity providers and data sources.




• Lead IAM implementation initiatives from requirements and design through build, testing, cutover, and production support.
• Drive automation of IAM deployment and administration using scripting (Python, Shell, PowerShell), Ping Admin APIs, and CI/CD pipelines.
• Collaborate with Security, HR, IT Ops, and Application teams to ensure a scalable, secure IAM architecture.
• Act as a technical mentor and lead for junior engineers and support teams.
• Support identity lifecycle processes and participate in IAM risk assessments and internal/external audits, ensuring compliance with regulatory requirements such as SOX and GDPR.
• Develop and implement policies, procedures, and standards related to IAM lifecycle, authentication, federation, and entitlement management.
• Provide technical leadership and mentorship to other team members on PingFederate, PingDirectory, Okta, Azure AD, etc.
• Enables single sign-on (SSO), federation, and MFA/passwordless services to provide secure and seamless user experiences
• Designs and automates authentication and authorization flows for all identities across Kroger, including workforce, partner, and customer use cases
• Collaborates with IT and business stakeholders to define and implement IAM solutions related to authentication and access controls that improve Kroger's cybersecurity processes and end-user experiences
• Drives continuous improvement of authentication and authorization processes
• Provides subject matter expertise to business areas who are managing their own control environment in regards to authentication and access controls
• Collaborates with the Cybersecurity GRC team to ensure IAM-related policies and standards are kept up-to-date and aligned to applicable compliance requirements
• Develops IAM business processes, risk and controls based on industry best practices and applicable compliance requirements
• Develops and maintains monitoring, patching, backup/DR, and upgrade processes for Ping platforms Required

Qualifications:
• 5-6+ years of experience in IAM engineering, implementation, architecture, and support.
• 3+ years of hands-on implementation experience with PingFederate (installation, clustering, SSO/federation configuration, application onboarding, upgrades,



and production support).
• 2+ years of hands-on implementation experience with PingDirectory (deployment, schema and replication design, data migration/synchronization, performance tuning, and support).
• Strong experience with federation and authentication standards: SAML 2.0, OAuth 2.0, OIDC, SCIM, LDAP, and FIDO2.
• Experience integrating Ping with Active Directory/LDAP, Azure AD/Entra ID, Okta, HRIS systems, and SaaS/enterprise applications.
• Proficiency in Java (custom adapters/plugins), REST APIs, and scripting (Python, Shell, or PowerShell); experience with the PingFederate and PingDirectory admin APIs.
• Experience with load balancers, PKI/certificate management, and TLS/SSL configuration in IAM environments.
• Strong understanding of IAM principles, including RBAC, ABAC, MFA, passwordless authentication, and privileged access.
• Experience supporting Ping deployments in Linux and cloud/hybrid environments (AWS, Azure, or GCP).
• Ability to work in Agile environments and lead sprint-based IAM delivery efforts.
• Excellent communication, documentation, and collaboration skills, with the ability to clearly communicate technical concepts to both technical and non-technical audiences.
• Ability to translate business requirements into technical designs, detailed requirements, and architecture models. Preferred Skills & Positive to Have:
• Experience with other Ping Identity products such as PingAccess, PingID, PingOne, and PingDataGovernance.
• Experience with Identity Governance & Administration (IGA) platforms such as SailPoint IdentityNow/ISC.
• Understanding of Zero Trust Architecture and security best practices.
• CI/CD pipeline configuration for Ping deployments and configuration promotion (e.g., Jenkins, GitLab CI, Azure DevOps, or GitHub Actions).
• Experience with containerized Ping deployments (Docker, Kubernetes, Helm) and Infrastructure-as-Code (Terraform, Ansible).
• Ping Identity, Okta, SailPoint, or cybersecurity certifications (e.g., PingFederate/PingDirectory certifications, CISSP, etc.).
• Experience working in regulated environments (e.g., HIPAA, SOX, GDPR compliance).
• Exposure to other IAM tools like CyberArk, ForgeRock, or Okta is a plus.
• Competency in security frameworks including NIST CSF, NIST 800-53, ISO 27001, SOX.
• Retail and/or grocery industry experience a plus. Benefits Visit us at http://alignity.io/careers. Alignity Solutions is an Equal Opportunity Employer, M/F/V/D. CEO Message: Click Here Clients Testimonial: Click Here

📌 Ping Federate and Ping directory (Hyderabad)
🏢 Alignity Solutions
📍 Hyderabad