IAM Engineer

First National Bank Of Pennsylvania•Pittsburgh, PA

3d•Onsite

About The Position

The IAM Engineer administers and engineers the Ping Identity platform to support secure, reliable, and scalable customer identity and user-management capabilities. The position serves as the Ping subject-matter expert, designs identity lifecycle and authentication processes, leads integrations, resolves complex platform issues, and prepares procedures, controls, monitoring, and training for phased operational support. The role also carries responsibility for managing and monitoring business risks in accordance with F.N.B. Corporation’s risk management program and complying with applicable regulatory requirements and company procedures. F.N.B. Corporation does not provide employment-based visa sponsorship for this position; candidates must be legally authorized to work in the United States.

Requirements

BA or BS degree.
At least 5 years of job-related experience.
Excellent written and verbal communication skills.
Excellent project management skills.
Excellent organizational, analytical, and interpersonal skills.
Detail-oriented.
Ability to work and multitask in a fast-paced environment.
Ability to use a personal computer and job-related software.
Intermediate-level MS Excel skills.
Intermediate-level MS PowerPoint skills.
Skills in identity engineering, APIs, scripting, authentication, CIAM, troubleshooting, technical documentation, change control, OAuth/OIDC, SAML, MFA, identity federation, API development and integration, and cloud identity platforms.
Legally authorized to work in the United States; employment-based visa sponsorship is not provided.

Nice To Haves

Relevant Ping Identity, IAM, CIAM, cloud, Microsoft, or information security certifications.

Responsibilities

Administer and support Ping Identity organizations, environments, populations, directories, applications, groups, roles, authentication policies, and administrative configurations to maintain a secure, stable, and supportable customer identity platform.
Engineer customer identity lifecycle processes, including registration, identity creation, profile updates, verification, authentication enrollment, password reset, account recovery, suspension, reactivation, deactivation, and deletion, with appropriate validation and evidence.
Lead identity integration activities for applications connecting to Ping, documenting attributes, authentication requirements, roles, groups, provisioning, deprovisioning, logging, monitoring, ownership, support, and escalation requirements before production implementation.
Develop and maintain automated identity workflows, authoritative data mappings, APIs, scripts, exception handling, reconciliation, monitoring, recovery, and technical documentation to reduce manual administration and improve lifecycle reliability.
Investigate and resolve complex Ping platform, authentication, registration, lifecycle, role-assignment, integration, and data-quality issues; coordinate incident response and root-cause remediation with security, application, infrastructure, vendor, and business partners.
Maintain least-privileged Ping administrative access, role definitions, custom roles, supporting approvals, access-review evidence, and segregation-of-duties controls; escalate excessive access, unsupported exceptions, or unresolved ownership concerns.
Create and maintain Ping architecture, configuration, support, troubleshooting, and customer user-management procedures; train Security Access Management analysts and backup administrators before routine production responsibilities are transitioned.
Plan, test, document, and validate Ping configuration changes, vendor releases, and platform enhancements through established Change Management processes, including implementation evidence, regression testing, rollback planning, and post-change verification.
Perform other related duties and projects as assigned.
Understand, report, respond to, manage, and monitor risks encountered in daily work as required by F.N.B. Corporation’s risk management program.
Comply with regulatory laws, guidelines, and company procedures.