IAM Engineer

F.N.B. Corporation•Pittsburgh, PA

5d•Onsite

About The Position

The IAM Engineer administers and engineers the Ping Identity platform to support secure, reliable, and scalable customer identity and user-management capabilities. The role serves as the Ping subject-matter expert, designs identity lifecycle and authentication processes, leads integrations, resolves complex platform issues, and prepares procedures, controls, monitoring, and training for phased operational support. The position also carries risk-management responsibilities under F.N.B. Corporation’s risk management program and requires compliance with applicable regulatory laws, guidelines, and company procedures. The role is based at 626 Washington Place, Pittsburgh, Pennsylvania 15219.

Requirements

Bachelor of Arts or Bachelor of Science degree.
At least 5 years of job-related experience.
Excellent written and verbal communication skills.
Excellent project management, organizational, analytical, and interpersonal skills.
Detail-oriented, with the ability to work and multitask in a fast-paced environment.
Ability to use a personal computer and job-related software.
Intermediate-level Microsoft Excel skills.
Intermediate-level Microsoft PowerPoint skills.
Knowledge or skills in identity engineering, APIs, scripting, authentication, CIAM, troubleshooting, technical documentation, change control, OAuth/OIDC, SAML, MFA, identity federation, API development and integration, and cloud identity platforms.
Legally authorized to work in the United States; employment-based visa sponsorship is not provided.

Nice To Haves

Relevant Ping Identity, IAM, CIAM, cloud, Microsoft, or information security certifications.

Responsibilities

Administer and support Ping Identity organizations, environments, populations, directories, applications, groups, roles, authentication policies, and administrative configurations.
Engineer customer identity lifecycle processes, including registration, identity creation, profile updates, verification, authentication enrollment, password reset, account recovery, suspension, reactivation, deactivation, and deletion.
Lead identity integrations for applications connecting to Ping by documenting attributes, authentication requirements, roles, groups, provisioning, deprovisioning, logging, monitoring, ownership, support, and escalation requirements before production implementation.
Develop and maintain automated identity workflows, authoritative data mappings, APIs, scripts, exception handling, reconciliation, monitoring, recovery, and technical documentation.
Investigate and resolve complex Ping platform, authentication, registration, lifecycle, role-assignment, integration, and data-quality issues; coordinate incident response and root-cause remediation with relevant partners.
Maintain least-privileged Ping administrative access, role definitions, custom roles, supporting approvals, access-review evidence, and segregation-of-duties controls; escalate excessive access, unsupported exceptions, or unresolved ownership concerns.
Create and maintain Ping architecture, configuration, support, troubleshooting, and customer user-management procedures; train Security Access Management analysts and backup administrators before routine production responsibilities are transitioned.
Plan, test, document, and validate Ping configuration changes, vendor releases, and platform enhancements through Change Management, including implementation evidence, regression testing, rollback planning, and post-change verification.
Perform other related duties and projects as assigned.
Understand, report, respond to, manage, and monitor daily business risks as required by F.N.B. Corporation’s risk management program.
Comply with regulatory laws and company procedures.