TC-CS-IAM-Ping Senior

About the Role

We are seeking consultants in the cyber security team to work on various Identity and Access Management (IAM) projects for our customers across the globe. The professional shall need to report any identified risks within engagements and share any issues and updates with the leadership/management on a timely basis. In line with EY’s commitment to quality, you’ll confirm that work is of the highest quality as per EY’s quality standards and is reviewed by the next-level reviewer. As an influential member of the team, you’ll help to create a positive learning culture, coach and counsel junior team members and help them to develop. As a member of the Identity and Access Management (IAM) team, this position will contribute towards execution of an IAM roadmap that meets security requirements, implementation and adoption of secrets management, management of machine identities and definition of access policies that meet their needs and are in line with overall IAM Program.

Key Responsibilities

• Design, deploy, and support Ping Identity solutions including PingFederate, PingAccess, PingOne SSO, PingDavinci and PingDirectory.
• Implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), OAuth, OpenID Connect (OIDC), SAML, and LDAP integrations.
• Monitor, troubleshoot, and resolve complex IAM issues through root cause analysis.
• Ensure high availability, performance optimization, and security compliance of IAM infrastructure.
• Develop automation scripts and deployment processes to improve operational efficiency.
• Implement change management, disaster recovery, and security best practices.
• Collaborate with application teams, infrastructure, and security teams to integrate enterprise applications.
• Create technical documentation, knowledge articles, and deployment guides while supporting continuous process improvements.

Requirements & Tech Stack

• Expertise in Single Sign-On (SSO), Multi-Factor Authentication (MFA), federation, access management, and identity governance.
• Experience with the Ping Identity suite.
• Familiarity with PingFederate, PingAccess, PingOne SSO, PingDavinci, and PingDirectory.
• Knowledge of OAuth, OpenID Connect (OIDC), SAML, and LDAP.

Qualifications

• The ideal candidate will have expertise in SSO, MFA, federation, access management, and identity governance while ensuring secure, scalable, and high-performing authentication solutions.