Senior IAM Architect

Ping Identity

Senior IAM Architect leading IAM practice across workforce and customer identity environments at Ping Identity. Responsible for architectural strategy, operational execution, and collaboration with product teams.

Posted 6/11/2026full-timeRemote • Colorado • 🇺🇸 United StatesSenior💰 $137,000 - $180,000 per yearWebsite

About the role

Key responsibilities & impact

Lead the architecture, roadmap, and day-to-day maturity of Ping’s internal IAM practice across WIAM, CIAM, authentication, authorization, federation, lifecycle management, and governance.
Own the design, implementation, operation, and continuous improvement of Ping’s internal identity platforms and supporting processes, with responsibility for keeping the environment secure, functional, and maintainable.
Act as the internal owner of Ping’s role model, access model, and identity architecture, ensuring business requirements are translated into scalable technical controls and usable identity services.
Partner with internal product teams to evaluate, pilot, and adopt new Ping products and acquired capabilities in Ping’s corporate and CIAM environments.
Work closely with IT, Security, HR, Engineering, Product, and other business stakeholders to define identity requirements, improve processes, and align IAM capabilities to real business needs.
Lead role engineering efforts by analyzing business requirements, defining roles and permissions in functional business terms, and ensuring system privileges map correctly to approved access models.
Drive strong operational execution for SSO, MFA, federation, provisioning, deprovisioning, role assignment, access reviews, and exception handling across internal and customer-facing systems.
Troubleshoot complex authentication, authorization, provisioning, and access issues across applications, directories, workflows, and connected systems.
Maintain and improve standards, procedures, controls, reporting, and documentation for IAM operations, including actual-state versus desired-state validation, access reviews, and change governance.
Maintain a lab and test environment to validate new integrations, prototype new capabilities, and safely trial new Ping products and patterns before production rollout.
Serve as Ping’s internal IAM thought leader and provide practical product feedback based on real enterprise use cases from Ping’s WIAM and CIAM environments.

Requirements

What you’ll need

8+ years of experience in Identity and Access Management, including significant experience designing, implementing, and operating both WIAM and CIAM environments.
Proven experience owning complex IAM platforms from architecture through operations in enterprise environments.
Experience building and maintaining DaVinci flows for WIAM and CIAM use cases.
Strong hands-on experience with Ping Identity products in production environments; including PingOne SSO, PingID, PingOne MFA, PingOne Protect, PingFederate.
Strong expertise with modern identity standards and protocols such as SAML, OAuth, OpenID Connect, SCIM, LDAP, and REST-based integrations.
Strong hands-on troubleshooting skills across authentication, federation, access, and provisioning flows, including the ability to diagnose issues across browsers, applications, logs, and connected systems.
Experience defining and maintaining roles, permissions, and access models in business terms while ensuring accurate implementation in technical systems and application authorization structures.
Strong understanding of identity lifecycle processes, including joiner/mover/leaver workflows, access requests, approvals, exception handling, access removal, and periodic review.
Experience implementing IAM controls, reporting, and governance processes that improve auditability, risk management, and operational integrity.
Working knowledge of identity-related infrastructure and supporting technologies such as directory services, PKI/certificates, networking, system administration, and application integrations.
Strong written and verbal communication skills with the ability to partner effectively across technical teams, business stakeholders, and leadership.
Demonstrated ability to operate independently, drive change, and bring structure to a fast-moving and evolving environment.
Bachelor’s degree in Computer Science, Information Systems, Engineering, or a related field, or equivalent practical experience.

Benefits

Comp & perks

Generous PTO & Holiday Schedule
Parental Leave
Progressive Healthcare Options
Retirement Programs
Opportunity for Education Reimbursement
Commuter Offset (Specific locations)

ATS Keywords

✓ Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills & Tools

Identity and Access ManagementWIAMCIAMPing Identity productsDaVinci flowsSAMLOAuthOpenID ConnectSCIMLDAP

Soft Skills

troubleshootingcommunicationindependencechange managementcollaboration