IAM Engineer

About the role

Primary Office Location: 626 Washington Place. Pittsburgh, Pennsylvania. 15219.

Join our team. Make a difference - for us and for your future.

• Position Title: IAM (Identity and Access Management) Engineer
• Business Unit: Information Security
• Reports to: Manager of Security Access Management

Position Overview

The IAM Engineer administers and engineers the Ping Identity platform to support secure, reliable, and scalable customer identity and user-management capabilities. This position serves as the Ping subject-matter expert, designs identity lifecycle and authentication processes, leads integrations, resolves complex platform issues, and prepares procedures, controls, monitoring, and training needed for phased operational support.

Primary Responsibilities

Administers and supports Ping Identity organizations, environments, populations, directories, applications, groups, roles, authentication policies, and administrative configurations to maintain a secure, stable, and supportable customer identity platform.

Engineers customer identity lifecycle processes, including registration, identity creation, profile updates, verification, authentication enrollment, password reset, account recovery, suspension, reactivation, deactivation, and deletion, with appropriate validation and evidence.

Leads identity integration activities for applications connecting to Ping by documenting attributes, authentication requirements, roles, groups, provisioning, deprovisioning, logging, monitoring, ownership, support, and escalation requirements before production implementation.

Develops and maintains automated identity workflows, authoritative data mappings, APIs, scripts, exception handling, reconciliation, monitoring, recovery, and technical documentation to reduce manual administration and improve lifecycle reliability.

Investigates and resolves complex Ping platform, authentication, registration, lifecycle, role-assignment, integration, and data-quality issues, and coordinates incident response and root-cause remediation with security, application, infrastructure, vendor, and business partners.

• Maintains least-privileged Ping administrative access, role definitions, custom roles, supporting approvals, access-review evidence, and segregation-of-duties controls, and escalates excessive access, unsupported exceptions, or unresolved ownership concerns.
• Creates and maintains Ping architecture, configuration, support, troubleshooting, and customer user-management procedures, and trains Security Access Management analysts and backup administrators before routine production responsibilities are transitioned.

Plans, tests, documents, and validates Ping configuration changes, vendor releases, and platform enhancements through established Change Management processes, including implementation evidence, regression testing, rollback planning, and post-change verification.

Performs other related duties and projects as assigned.

All employees have the responsibility and the accountability to serve as risk managers for their businesses by understanding, reporting, responding to, managing and monitoring the risk they encounter daily as required by F.N.B. Corporation's risk management program.

• F.N.B.
• Corporation is committed to achieving superior levels of compliance by adhering to regulatory laws and guidelines.
• Compliance with regulatory laws and company procedures is a required component of all position descriptions.

Minimum Level of Education Required to Perform the Primary Responsibilities of this Position:

BA or BS

Minimum # of Years of Job Related Experience Required to Perform the Primary Responsibilities of this Position:

5

Skills Required to Perform the Primary Responsibilities of this Position

• Excellent communication skills, both written and verbal
• Excellent project management skills
• Excellent organizational, analytical and interpersonal skills
• Detail-oriented
• Ability to work and multi-task in a fast paced environment
• Ability to use a personal computer and job-related software
• MS Excel - Intermediate Level
• MS PowerPoint - Intermediate Level

Additional information

Identity engineering, APIs, scripting, authentication, CIAM, troubleshooting, technical documentation, change control, Oauth/OIDC, SAML, MFA, Identity Federation, API Development and Integration & Cloud Identity Platforms

Licensures/Certifications Required to Perform the Primary Responsibilities of this Position:

Relevant Ping Identity, IAM, CIAM, cloud, Microsoft or information security certifications

Physical Requirements or Work Conditions Beyond Traditional Office Work

N/A