Job Description: IAM Ping Identity Engineer (Contract) Location: Remote, US-based (must be authorized to work in the United States) Engagement Type: Independent Contractor / W2 Contract Duration: 6 months, with potential to extend Industry: Financial Services

About the Role

We are looking for an experienced IAM Ping Identity Engineer to join a large financial services organization on a contract basis. You will work within a mature, compliance-driven environment to support the design, implementation, and ongoing operations of the organization's identity and access management infrastructure. This role is well-suited for someone who has hands-on Ping product experience and is comfortable operating under the governance and change management standards typical of regulated industries.

Key Responsibilities

Design, configure, and maintain Ping Identity solutions including PingFederate, PingAccess, and PingDirectory Administer and troubleshoot SSO, federation, and authentication integrations across enterprise applications Support OAuth 2.0, OIDC, and SAML-based integrations with internal and external service providers Participate in the full IAM lifecycle including onboarding, access provisioning, and deprovisioning workflows Collaborate with application teams, security architects, and infrastructure teams to integrate applications with the Ping ecosystem Maintain documentation for configurations, runbooks, and change requests in alignment with change management policies Assist with audits, compliance reviews, and evidence gathering for regulatory requirements (SOX, PCI-DSS, or similar) Identify and remediate security vulnerabilities or misconfigurations within the IAM environment Support incident triage and resolution for authentication and access-related issues Required Qualifications 4-7 years of experience in Identity and Access Management 3+ years of hands-on experience with Ping Identity products (PingFederate required; PingAccess and PingDirectory a strong plus) Solid understanding of federation protocols: SAML 2.0, OAuth 2.0, and OIDC Experience working in regulated environments such as financial services, healthcare, or government Familiarity with LDAP/Active Directory and directory services integration Working knowledge of MFA solutions and adaptive authentication policies Experience with change management processes and operating within ITSM frameworks (ServiceNow or equivalent) Ability to work independently and manage deliverables with limited day-to-day supervision

Preferred Qualifications

Ping Identity certifications (PingFederate Engineer, etc.) Experience with CyberArk, SailPoint, or other PAM/IGA platforms Exposure to cloud IAM patterns (AWS IAM, Azure AD/Entra ID) Scripting or automation experience (Python, PowerShell, or Bash) for IAM workflows Familiarity with SOX, PCI-DSS, or FFIEC compliance frameworks Contractor Requirements Must be based in the United States and authorized to work without sponsorship Must be able to pass a background check, including financial background screening Corp-to-Corp (C2C) or W2 engagements considered; no third-party C2C without prior approval