PingFederate SME

PingFederate SME

Location-Remote

Key Responsibilities

· Provide L3 production support for PingFederate and related IAM services, resolving complex issues escalated from L1/L2 teams.

· Troubleshoot complex SSO, SAML 2.0, OAuth 2.0 and OpenID Connect authentication and authorization issues.

· Troubleshoot PingFederate connections, adapters, authentication policies, policy contracts, token management and certificates.

· Lead technical troubleshooting for P1/P2 incidents and provide timely mitigation and service restoration.

· Perform detailed RCA and drive permanent corrective and preventive actions.

· Support integrations with enterprise applications, Microsoft Entra ID/Azure AD, Active Directory, APIs and other identity providers.

· Support PingFederate upgrades, patching, configuration changes, migrations and platform improvements.

· Investigate DNS, load balancer, TLS/certificate, network connectivity and backend dependency issues.

· Investigate performance, availability, JVM, thread, memory and transaction-related issues.

· Use Grafana, Splunk, OpenSearch/ELK and application/platform logs for advanced troubleshooting and observability.

· Develop scripts and automation to reduce repetitive operational activities and improve reliability.

· Create and maintain SOPs, runbooks, knowledge articles and troubleshooting guides.

· Identify recurring issues and drive problem-management initiatives and permanent fixes.

· Mentor L1/L2 engineers and provide technical guidance to application, infrastructure, security and vendor teams.

4. Mandatory Technical Skills

Ping / IAM

· Strong hands-on expertise with PingFederate.

· Strong understanding of SAML 2.0, OAuth 2.0 and OpenID Connect.

· Working knowledge of PingDirectory and exposure to PingAccess, PingID and/or PingOne.

· Experience with IdP/SP configuration, authentication policies, adapters and policy contracts.

· Experience with Access Token Management and token-related troubleshooting.

· Strong understanding of certificates, keystores and TLS.

Troubleshooting & Production Support

· SSO authentication failures and intermittent authentication issues.

· SAML assertion, attribute, NameID, signing and encryption issues.

· OAuth/OIDC token, scope, callback, session and correlation issues.

· Certificate expiry, trust-store/keystore and TLS issues.

· Authentication policy and adapter failures.

· DNS, load balancer, connectivity and backend LDAP/Directory issues.

· End-to-end application integration problems.