Ping Engineer

TIAA•Charlotte, NC

4d•Hybrid

About The Position

We are looking for an experienced and passionate Ping Engineer to join our Customer Identity and Access Management (CIAM) team. In this role, you will take end-to-end technical ownership of identity and access management solutions, working closely with architects, engineers, and business stakeholders to design, build, and maintain secure, scalable, and highly available identity platforms. You are someone who thrives in a collaborative environment, champions engineering best practices, and is energized by solving complex identity, security, and fraud challenges.

Requirements

Deep hands-on experience with the Ping Identity suite, specifically PingFederate, PingAccess, and Ping Directory.
Strong command of OAuth 2.x, SAML, and LDAP security protocols.
Solid background in Java development and the Spring Framework ecosystem.
Comfortable working with RESTful APIs, OpenAPI specifications, and data formats including JSON, XML, XSD, and XSLT.
Demonstrated experience driving operational excellence within a CIAM or identity engineering context, including incident management, SLO/SLA ownership, observability, and platform reliability engineering.
Experience collaborating with or working within fraud engineering teams to build identity-aware fraud detection and prevention capabilities.
Experience working in containerized environments using OpenShift or Amazon EKS.
Familiarity with cloud platforms including AWS.
Experience with relational and NoSQL databases, including Oracle, PL/SQL, and MongoDB.
Strong leadership and interpersonal skills, with the ability to communicate complex technical concepts clearly to both technical and non-technical audiences.
Analytical, detail-oriented, and a genuine passion for technology and solving real-world problems through innovative engineering solutions.
5+ Years Required Work Experience

Nice To Haves

Experience with Transmit Security is strongly preferred.
Familiarity with risk-based authentication, behavioral biometrics, and fraud signal integration is a strong plus.
Prior experience in financial services or a highly regulated industry is advantageous, particularly where identity and fraud controls are subject to rigorous compliance and audit requirements.
7+ Years Preferred Work Experience

Responsibilities

Serve as a subject matter expert in the Ping Identity suite, leading the design, implementation, and operational support of PingFederate, PingAccess, and Ping Directory across enterprise environments.
Architect and deliver identity solutions that leverage industry-standard security protocols including OAuth 2.x, SAML, and LDAP, ensuring they meet both functional and non-functional requirements for performance, security, and reliability.
Own and drive operational excellence across CIAM and fraud engineering domains, ensuring that identity and fraud prevention platforms are highly available, resilient, and continuously improving.
Establish and monitor key performance indicators and service level objectives for all CIAM services, proactively identifying risks and vulnerabilities, and leading efforts to remediate issues before they impact customers or the business.
Lead level 3 incident management and response activities for CIAM and fraud-related events, serving as a technical escalation point during high-severity incidents.
Drive thorough post-incident reviews, ensuring root cause analysis is completed, corrective actions are tracked to closure, and learnings are shared broadly to strengthen the platform.
Maintain detailed runbooks, operational playbooks, and disaster recovery documentation to support rapid and consistent incident response.
Establish and champion a culture of proactive platform health management, leveraging observability tools such as Dynatrace to build comprehensive dashboards, alerts, and automated remediation capabilities.
Define and enforce standards for logging, tracing, and monitoring across all CIAM and fraud engineering services to ensure full operational visibility.
Drive continuous improvement initiatives across the CIAM and fraud engineering landscape, including capacity planning, performance tuning, platform hardening, and regular security assessments.
Collaborate with security, risk, and compliance teams to ensure that identity and fraud platforms meet regulatory requirements and internal control standards, including those related to data privacy, access governance, and audit logging.
Collaborate across technical disciplines — including application development, cloud infrastructure, security, and enterprise architecture — to integrate identity solutions seamlessly into the broader technology ecosystem.
Work with containerized environments on OpenShift and AWS EKS, as well as supporting identity capabilities delivered through Transmit Security.
Champion Agile software development methodologies, actively participating in sprint planning, backlog grooming, and iterative delivery.
Advocate strongly for unit testing, test-driven development, and automated testing practices, helping to establish and uphold quality standards across the team.
Work within a modern cloud and DevOps environment, leveraging AWS services, infrastructure-as-code tooling such as Terraform, and observability platforms such as Dynatrace to ensure platform health and operational excellence.
Utilize automated build and deployment pipelines, Git-based source control, and Gradle for build automation as part of a mature CI/CD practice.