Senior IAM Architect

• Architect USA - Remote Apply About Ping Identity At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise. We call this digital freedom. And it's not just something we provide our customers. It's something that inspires our company. People don't come here to join a culture that's built on digital freedom. They come to cultivate it. Our intelligent, cloud identity platform lets people shop, work, bank, and interact wherever and however they want. Without friction. Without fear. While protecting digital identities is at the core of our technology, protecting individual identities is at the core of our culture. We champion every identity. One of our core values, Respect Individuality, reminds us to celebrate differences so you are empowered to bring your authentic self to work. We're headquartered in Denver, Colorado and we have offices and employees around the globe. We serve the largest, most demanding enterprises worldwide, including more than half of the Fortune 100. At Ping Identity, we're changing the way people and businesses think about cybersecurity, digital experiences, and identity and access management. As a Senior IAM
• Architect on Ping’s Corporate IT Systems Administration team, you will lead the company’s internal IAM practice across both workforce and customer identity environments. This is a senior, hands-on role for someone who can design, implement, operate, troubleshoot, and continuously improve identity capabilities for Ping as the customer. This person will serve as the internal owner of Ping’s IAM architecture, role model, and operational direction, helping ensure the environment is secure, functional, scalable, and maintainable while partnering closely with internal product teams and business stakeholders to evaluate and adopt new Ping capabilities over time. Responsibilities
• Lead the architecture, roadmap, and day-to-day maturity of Ping’s internal IAM practice across WIAM, CIAM, authentication, authorization, federation, lifecycle management, and governance. Own the design, implementation, operation, and continuous improvement of Ping’s internal identity platforms and supporting processes, with responsibility for keeping the environment secure, functional, and maintainable. Act as the internal owner of Ping’s role model, access model, and identity architecture, ensuring business requirements are translated into scalable technical controls and usable identity services.
• Partner with internal product teams to evaluate, pilot, and adopt new Ping products and acquired capabilities in Ping’s corporate and CIAM environments.
• Work closely with IT, Security, HR, Engineering, Product, and other business stakeholders to define identity requirements, improve processes, and align IAM capabilities to real business needs.
• Lead role engineering efforts by analyzing business requirements, defining roles and permissions in functional business terms, and ensuring system privileges map correctly to approved access models.
• Drive strong operational execution for SSO, MFA, federation, provisioning, deprovisioning, role assignment, access reviews, and exception handling across internal and customer-facing systems. Troubleshoot complex authentication, authorization, provisioning, and access issues across applications, directories, workflows, and connected systems. Maintain and improve standards, procedures, controls, reporting, and documentation for IAM operations, including actual-state versus desired-state validation, access reviews, and change governance. Maintain a lab and test environment to validate new integrations, prototype new capabilities, and safely trial new Ping products and patterns before production rollout. Serve as Ping’s internal IAM thought leader and provide practical product feedback based on real enterprise use cases from Ping’s WIAM and CIAM environments. Required Skills & Qualifications 8+ years of experience in Identity and Access Management, including significant experience designing, implementing, and operating both WIAM and CIAM environments.
• Proven experience owning complex IAM platforms from architecture through operations in enterprise environments.
• Experience building and maintaining DaVinci flows for WIAM and CIAM use cases.
• Strong hands-on experience with Ping Identity products in production environments; including PingOne SSO, PingID, PingOne MFA, PingOne Protect, PingFederate.
• Strong expertise with modern identity standards and protocols such as SAML, OAuth, OpenID Connect, SCIM, LDAP, and REST-based integrations.
• Strong hands-on troubleshooting skills across authentication, federation, access, and provisioning flows, including the ability to diagnose issues across browsers, applications, logs, and connected systems.
• Experience defining and maintaining roles, permissions, and access models in business terms while ensuring accurate implementation in technical systems and application authorization structures.
• Strong understanding of identity lifecycle processes, including joiner/mover/leaver workflows, access requests, approvals, exception handling, access removal, and periodic review.
• Experience implementing IAM controls, reporting, and governance processes that improve auditability, risk management, and operational integrity. Working knowledge of identity-related infrastructure and supporting technologies such as directory services, PKI/certificates, networking, system administration, and application integrations.
• Strong written and verbal communication skills with the ability to partner effectively across technical teams, business stakeholders, and leadership. Demonstrated ability to operate independently, drive change, and bring structure to a fast-moving and evolving environment. Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent practical experience. Desired Candidate Skills
• Strong hands-on experience with Ping Identity products in production environments. Expertise designing, implementing, and maintaining DaVinci Product flows.
• Familiarity with PingOne Architecture and the broader Ping platform ecosystem.
• Experience with PingOne SSO, PingID, PingOne MFA, PingOne Protect, PingOne Authorize, PingFederate, PingAccess, PingDirectory, and related Ping technologies.
• Experience serving as an internal platform owner who can evaluate new capabilities, form a point of view on the right architecture for the business, and drive adoption of new identity capabilities over time.
• Experience maintaining lab environments, testing new integrations, and validating new identity patterns before production deployment.
• Strong understanding of access controls, segregation of duties, least privilege, and policy-driven authorization models.
• Experience with change management, release management, and integrating IAM work into broader IT and security operating processes.
• Experience with DevOps and platform engineering practices such as Terraform, CI/CD, API integration, and cloud-native deployment models. Ability to represent Ping internally as the enterprise customer and translate that experience into better architecture, better operational outcomes, and stronger adoption of Ping technology. Salary Range $137,000 - $180,000

Life at Ping

We believe in and facilitate a flexible, collaborative work environment. We’re growing quickly, but remain true to the innovative, can-do startup values that got us here. Most importantly, we keep hiring talented, smart, fun, and genuinely nice people because that’s who we want to succeed with every day.

Here are just a few of the things that make Ping special A company culture that empowers you to do your best work. Employee Resource Groups that create a sense of belonging for everyone. Regular company and team bonding events.

Competitive benefits and perks. Global volunteering and community initiatives Our Benefits Generous PTO & Holiday Schedule Parental Leave Progressive Healthcare Options Retirement Programs Opportunity for Education Reimbursement Commuter Offset (Specific locations) Ping is the collective sum of all our individual experiences, backgrounds and influences and we pride ourselves in growing and learning together. We are committed to building an inclusive and diverse environment where everyone’s individuality is respected and everyone has an Identity.

In recruiting for new colleagues, we welcome the unique contributions you can bring and encourage you to be your best self. We are an

Equal Opportunity

• /Affirmative Action employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex including sexual orientation and gender identity, national origin, disability, protected Veteran Status, or any other characteristic protected by applicable federal, state, or local law.
• Create a Job Alert Interested in building your career at Ping Identity? Get future opportunities sent straight to your email.
• Create alert Apply for this job * indicates a required field Quick Apply with MyGreenhouse First Name * Last Name *
• Preferred First Name * Email * Phone Country * Phone * Location (City) * Locate me Resume/CV * Attach Attach Dropbox Google
• Drive Enter manually Enter manually Accepted file types pdf, doc, docx, txt, rtf Cover Letter Attach Attach Dropbox Google
• Drive Enter manually Enter manually Accepted file types pdf, doc, docx, txt, rtf LinkedIn Profile * Non-Disclosure Agreement * Select... You understand and agree that as part of the application process Ping Identity may provide certain non-public information that is and must be kept confidential. You agree not to disclose any non-public information required to do so by law. Privacy Statement * Select... By submitting your application, resume, and/or other personal information through this site, you agree that Ping Identity may use your personal information in accordance with Ping Identity's Privacy Statement . Please review and acknowledge that you have read and agree to the Privacy Statement. Upon hire, can you provide verification of your identity and legal right to work in the country where this job is located? * Select... Will you now or in the future require sponsorship to work in the country where this job is located? * Select... Have you ever worked with Ping Identity or ForgeRock in the past? Select... Do you have any relatives employed by Ping Identity? If yes, provide their name below. How did you hear about us? * I am a Ping Employee Twitter Ping Career Website Ping Recruiter Other LinkedIn Job Fair Indeed.com Google Glassdoor Former Ping Identity Employee Former Intern of Ping Identity Facebook Employee Referral Circa CareerBuilder Agency InHerSight Voluntary Self-Identification For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file. As set forth in Ping Identity’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law. Gender Select... Are you Hispanic/Latino? Select... Race & Ethnicity Definitions If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA.

Classification of protected categories is as follows

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability. A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense. An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Veteran Status Select... Voluntary Self-Identification of Disability Form CC-305 Page 1 of 1 OMB Control Number 1250-0005 Expires 04/30/2026 Why are you being asked to complete this form?

We are a federal contractor or subcontractor. The law requires us to provide equal employment opportunity to qualified people with disabilities.

We have a goal of having at least 7% of our workers as people with disabilities. The law says we must measure our progress towards this goal.

To do this, we must ask applicants and employees if they have a disability or have ever had one. People can become disabled, so we need to ask this question at least every five years.

Completing this form is voluntary, and we hope that you will choose to do so. Your answer is confidential.

No one who makes hiring decisions will see it. Your decision to complete the form and your answer will not harm you in any way.

If you want to learn more about the law or this form, visit the U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) website at www.dol.gov/ofccp .

How do you know if you have a disability? A disability is a condition that substantially limits one or more of your “major life activities.” If you have or have ever had such a condition, you are a person with a disability.

Disabilities include, but are not limited to: Alcohol or other substance use disorder (not currently using drugs illegally) Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS Blind or low vision Cancer (past or present) Cardiovascular or heart disease Celiac disease Cerebral palsy Deaf or serious difficulty hearing Diabetes Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders Epilepsy or other seizure disorder Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome Intellectual or developmental disability Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD Missing limbs or partially missing limbs Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS) Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities Partial or complete paralysis (any cause) Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema Short stature (dwarfism) Traumatic brain injury Disability Status Select... PUBLIC BURDEN STATEMENT According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number.

This survey should take about 5 minutes to complete. Submit application Powered by Greenhouse