IAM Ping Engineer

IAM Ping Engineer at Mondelēz International

Join Mondelēz International and serve as a senior technical expert for our Ping Identity Access Platform. You will be a hands-on subject matter expert across PingFederate, PingID MFA, and Ping Directory. In this role, you will design, operate, and evolve a secure, scalable authentication and federation platform that enables seamless access across the enterprise.

How You Will Contribute

You will collaborate closely with Engineering, architecture, security, and application teams to deliver a reliable and resilient identity platform at global scale. Your work will focus on platform stability, secure-by-design integrations, continuous improvement, and automation, while ensuring the Ping platform evolves as a strategic enterprise capability. You will take ownership of platform enhancements, global changes, and operational outcomes.

What You Will Bring

• Act as a subject matter expert (SME) for PingFederate, PingID MFA, and Ping Directory.
• Perform day-to-day technical operations and execution for PingFederate, PingID MFA, and Ping Directory services.
• Design, implement, and maintain SAML, OAuth 2.0, and OpenID Connect (OIDC) integrations.
• Support new application onboarding, including configuration and maintenance of connections, authentication policies, and certificate lifecycle management.
• Serve as a senior escalation point for critical, high-severity authentication and SSO incidents.
• Monitor, analyze, and troubleshoot Ping platform health, availability, and performance.
• Collaborate with application and IT teams to integrate secure, user-friendly SSO and MFA into core enterprise platforms.
• Provide operational support for SSO, MFA, and directory services, including monitoring, HA/DR support, and executing configuration changes.
• Design and implement advanced OAuth capabilities.
• Drive continuous improvement through automation and enhancement of platform reliability and scalability.
• Mentor and coach junior team members.
• Present identity and security concepts to various audiences.
• Partner with stakeholders to define security requirements.
• Support compliance activities, including audit evidence collection and access reviews.
• Prioritize and balance workload based on severity, risk, and delivery timelines.
• Make informed, risk-based recommendations when deviations from standards are required.
• Participate actively in problem, change, and release management forums.
• Drive vendor accountability and ensure SLA/OLA adherence.
• Define and maintain monitoring, alerting, and observability standards.
• Maintain high-quality technical documentation.

Skills And Qualifications

• 7+ years of hands-on experience implementing and operating PingFederate, PingID MFA, and Ping Directory.
• Strong technical leadership with deep, hands-on expertise in PingFederate and PingID MFA.
• Experience with Active Directory and/or Microsoft Entra ID (Azure AD) preferred.
• Strong understanding of authentication, federation, MFA, and directory services.
• Solid knowledge of certificate lifecycle management, SSL/TLS, and cryptographic fundamentals.
• Expertise in IAM protocols and standards: SAML, OAuth 2.0, OpenID Connect, SCIM.
• Proficiency in scripting or programming for automation and integrations (e.g., PowerShell, Java, C#).
• Experience with cloud IAM platforms (Azure, AWS, Google Cloud).
• Familiarity with Agile, DevSecOps, and ITIL practices.
• Excellent written and verbal communication skills.
• Strong interpersonal skills with a customer-centric mindset.
• Proven ability to perform in high-pressure, time-critical situations.
• Strong analytical, organizational, and problem-solving skills.
• Ability to thrive in a fast-paced environment with shifting priorities.
• Commitment to continuous learning and professional development.

Bonus Points

• ISC2 certifications like CISSP, CCSP
• Ping Certifications
• ITIL 4 Foundations Certification
• Other IAM products certifications

Key skills/competency

• IAM Ping Engineer
• PingFederate
• PingID MFA
• Ping Directory
• SAML
• OAuth 2.0
• OpenID Connect (OIDC)
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• Directory Services