IAM Engineer I – Ping Identity Access Management

Sheetz, Inc • Pittsburgh, PA

22h • Remote

About The Position

We are seeking an IAM Engineer I to support the administration, integration, and ongoing enhancement of enterprise authentication and access management platforms, with a primary focus on Ping Identity technologies. This role is responsible for delivering secure and scalable SSO, MFA, federation, and access management solutions across cloud, on-premises, and hybrid environments. Responsibilities include supporting application integrations using SAML, OIDC, OAuth, SCIM and underlying directory environments, assisting with authentication policy configuration, troubleshooting access issues, and helping maintain the identity infrastructure. The ideal candidate will work closely with IT and Cyber teams as well as business stakeholders to deliver secure, scalable, and user-friendly identity solutions aligned to security standards, operational requirements, and compliance objectives. Candidates should possess foundational experience with IAM, federation, authentication protocols, directory services, and secure access concepts, along with strong analytical and troubleshooting skills in an enterprise environment. Experience with Microsoft Entra ID and F5 Distributed Cloud Services / F5 APM is considered a plus.
This role qualifies for a remote work arrangement within our 7 state footprint (PA, OH, MI, WV, VA, MD, NC).

Requirements

• Minimum 3 years’ experience in Identity and Access Management or related field, with demonstrated expertise in IAM platforms and technologies, core IAM principals (least privilege, PAM, lifecycle management), directory services, authentication and authorization, RBAC, compliance initiatives, and IAM architecture, ports, and protocols required.
• May utilize SailPoint, BeyondTrust, Saviynt, Delinea, ForgeRock, Ping Identity, Okta, CyberArk, Duo, Entra, Active Directory, etc.
• Previous experience with Windows, Linux, and appliance network and server administration required.
• Previous experience with service management and reporting tools (ServiceNow, Jira, ManageEngine, etc.) required.
• Previous experience in implementing compliance frameworks (NIST, ISO, CIS, PCI-DSS, etc.) required.
• Previous experience in scripting, query languages, and APIs for integration and automation of enterprise applications required.

Nice To Haves

• Experience with Microsoft Entra ID and F5 Distributed Cloud Services / F5 APM is considered a plus.
• IAM, cybersecurity, or similar certification is preferred.

Responsibilities

• Design, build, implement, administer, and maintain IAM systems, roles, workflows, and integrations performing system monitoring, health checks, configuration updates, and minor upgrades to ensure secure and reliable operations.
• Serve as a primary technical resource during IAM system incidents or degradation events, performing troubleshooting, resolving IAM system issues, performing root cause analysis and assisting junior team members to develop skills and capabilities as needed.
• Support large-scale system upgrades and migration projects under guidance.
• Collaborate with team members and stakeholders to address moderately complex IAM-related questions and issues in relation to organizational, department, team, or technology projects.
• Develop and implement continuous improvements by optimizing workflows and reducing manual effort through automation while coordinating with IAM teams, IT, and other business units to improve efficiency, accuracy, and scalability of identity lifecycle processes.
• Develop, document, and refine IAM technical records such as standard operating procedures (SOPs), workflows, diagrams, end-user training materials, and job aids for identity and access tasks ensuring alignment with security, compliance, and governance standards
• Participate in IAM Implementation / Deployment / Documentation projects, providing technical input and executing assigned deliverables as required.
• Monitor identity systems and processes, identifying trends, reporting potential issues to the appropriate teams.
• Participate in on-call rotation, provide evening and weekend support as needed. Sheetz is open 24/7/365 and as such, our internal and external customers may require support at any time.

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level