Website:
Job details:
PingFederate SME
Location-Remote
Key Responsibilities
· Provide L3 production support for PingFederate and related IAM services, resolving complex issues escalated from L1/L2 teams.
· Troubleshoot complex SSO, SAML 2.0, OAuth 2.0 and OpenID Connect authentication and authorization issues.
· Troubleshoot PingFederate connections, adapters, authentication policies, policy contracts, token management and certificates.
· Lead technical troubleshooting for P1/P2 incidents and provide timely mitigation and service restoration.
· Perform detailed RCA and drive permanent corrective and preventive actions.
· Support integrations with enterprise applications, Microsoft Entra ID/Azure AD, Active Directory, APIs and other identity providers.
· Support PingFederate upgrades, patching, configuration changes, migrations and platform improvements.
· Investigate DNS, load balancer, TLS/certificate, network connectivity and backend dependency issues.
· Investigate performance, availability, JVM, thread, memory and transaction-related issues.
· Use Grafana, Splunk, OpenSearch/ELK and application/platform logs for advanced troubleshooting and observability.
· Develop scripts and automation to reduce repetitive operational activities and improve reliability.
· Create and maintain SOPs, runbooks, knowledge articles and troubleshooting guides.
· Identify recurring issues and drive problem-management initiatives and permanent fixes.
· Mentor L1/L2 engineers and provide technical guidance to application, infrastructure, security and vendor teams.
4. Mandatory Technical Skills
Ping / IAM
· Strong hands-on expertise with PingFederate.
· Strong understanding of SAML 2.0, OAuth 2.0 and OpenID Connect.
· Working knowledge of PingDirectory and exposure to PingAccess, PingID and/or PingOne.
· Experience with IdP/SP configuration, authentication policies, adapters and policy contracts.
· Experience with Access Token Management and token-related troubleshooting.
· Strong understanding of certificates, keystores and TLS.
Troubleshooting & Production Support
· SSO authentication failures and intermittent authentication issues.
· SAML assertion, attribute, NameID, signing and encryption issues.
· OAuth/OIDC token, scope, callback, session and correlation issues.
· Certificate expiry, trust-store/keystore and TLS issues.
· Authentication policy and adapter failures.
· DNS, load balancer, connectivity and backend LDAP/Directory issues.
· End-to-end application integration problems.
Click on Apply to know more.