(Senior) IAM Consultant / Engineer – Ping Identity (m/f/d)

As a Senior IAM Consultant/Engineer, you will design, implement and operate enterprise-grade IAM and federation solutions around Ping Identity products in on-prem or hybrid setups. You will work with cross-functional teams to deliver secure, scalable authentication and authorization workflows. You’ll optimize self-service, policies and RBAC/ABAC while advancing integration through APIs and connectors. This is a hands-on, problem-solving role at scale with a focus on security and collaboration.

• Operate and continuously enhance IAM systems using Ping Identity components (PingAM, PingIDM, PingDirectory)
• Install, configure and maintain Ping Identity in on-premise or hybrid environments
• Design and implement SSO, MFA, federation using SAML, OAuth 2.0, OIDC
• Integrate apps and targets via REST APIs, connectors, and automation scripts
• Support identity lifecycle, directory services, schema extensions, and access policies
• Improve self-service, delegated administration, and workflow-based processes
• Collaborate with architecture, security, and application teams to deliver secure IAM solutions

• Several years of hands-on experience with PingAM, PingIDM, or PingDirectory
• Solid understanding of authentication, authorization, and federation standards
• Strong Linux knowledge and scripting/automation skills (Python, Groovy, JavaScript, Bash)
• Experience with Jira, Confluence, GitLab
• Fluent English; German or other languages are a plus
• Willingness to travel

• collaboration across teams
• problem-solving mindset
• strong communication
• Ping Identity products (PingAM, PingIDM, PingDirectory)
• SSO, MFA, federation (SAML, OAuth 2.0, OIDC)
• REST APIs and product connectors