PingOne CIAM Engineer

Title: PingOne CIAM Engineer

Location : Milpitas, CA (onsite) 

Role Summary

Experienced PingOne CIAM Engineer with strong hands-on expertise in designing, configuring, integrating, and supporting customer identity solutions using PingOne / Ping Identity.

The resource will work closely with application, security, architecture, DevOps, and business teams to implement secure and scalable customer authentication and identity journeys across web and mobile applications.

Key Responsibilities

• Design, configure, implement, and support PingOne-based CIAM solutions.
• Configure and maintain customer authentication, registration, account recovery, and identity-management journeys.
• Integrate web and mobile applications with PingOne using standard identity protocols and APIs.
• Work with OAuth 2.0, OpenID Connect (OIDC), SAML, SSO and MFA patterns as applicable to application requirements.
• Configure and support customer identity profiles, attributes, roles, authorization, and access policies.
• Develop and maintain identity orchestration flows using PingOne DaVinci.
• Integrate PingOne with applications, APIs, directories, third-party identity providers, security services, and other enterprise platforms.
• Configure DaVinci flows, connectors, business logic, policies, and reusable customer journeys. Ping Identity documents DaVinci as a no-code orchestration service that can connect identity technologies and applications through flows and integrations.
• Support application onboarding and CIAM integration activities.
• Troubleshoot authentication, authorization, federation, application integration, and customer login issues.
• Perform root-cause analysis for complex CIAM incidents and identify permanent corrective actions.
• Support configuration promotion across development, staging/test, and production environments. Ping Identity documents configuration promotion between sequential environments as part of its development capabilities.
• Participate in design reviews, code/configuration reviews, testing, release readiness, and production deployments.
• Support monitoring, incident management, problem management, change management, and production stabilization.
• Maintain appropriate administrator privileges and follow least-privilege principles. PingOne provides built-in administrative roles including Environment Admin, Identity Data Admin, DaVinci Admin, Client Application Developer, Application Owner, Help Desk Admin, and other administrative roles.
• Create and maintain technical documentation, integration specifications, configuration documentation, troubleshooting guides, and operational runbooks.
• Collaborate with security and architecture teams to ensure CIAM implementation aligns with security and privacy requirements.

Mandatory Technical Skills

Candidates should have hands-on experience in most of the following:

Ping Identity / CIAM

• PingOne
• Customer Identity & Access Management (CIAM)
• Authentication and authorization
• Customer registration and self-service identity journeys
• MFA / strong authentication
• Application onboarding and integration
• Identity attributes, roles, and access policies.