IAM Software Engineer

About the role

Valorem Reply is seeking an engineer to design and maintain enterprise identity and access management systems. You will work within our dedicated IAM team to modernize authentication processes and automate authorization workflows for our clients.

Key facts

What you'll do

• Partner with cloud, infrastructure, and security departments to manage large-scale identity orchestration.
• Deploy and manage Ping Identity tools to handle SSO, MFA, and adaptive authentication requirements.
• Build authentication policies and adapters to support diverse user access needs.
• Use PingOne DaVinci to create low-code workflows and connect third-party security tools.
• Automate administrative tasks, monitoring, and operations using Python, Bash, or PowerShell and REST APIs.
• Manage Joiner-Mover-Leaver lifecycles by connecting Ping components to identity sources and service providers.
• Assist application owners in migrating legacy systems to modern standards like OIDC, OAuth 2.0, SAML 2.0, and SCIM.
• Resolve technical issues related to authentication, LDAP queries, and synchronization.
• Produce architecture diagrams, operational run books, and technical documentation.

Requirements

• Minimum of 3 years of professional experience in software engineering, IAM, or API platform architecture.
• Practical experience with low-code or no-code workflow development platforms.
• Hands-on technical background with the Ping Identity suite, specifically PingFederate, PingAccess, PingDirectory, or PingOne.
• Familiarity with identity protocols including SAML, OAuth 2.0, and OIDC.
• Competency with RESTful APIs, JSON data structures, and the Postman tool.
• Ability to write scripts in Python, Bash, or PowerShell.

Nice to have

• Expertise in LDAP best practices using Ping Directory.
• Background in DevOps, specifically applying Identity as Code through CI/CD pipelines and configuration automation.
• Proficiency in JavaScript for implementing custom business logic.
• Advanced skills in JSON for event handling and REST integrations.
• Basic knowledge of HTML and CSS for UI branding and page hosting.
• Experience with identity orchestration and PingOne DaVinci.
• Professional certifications in Ping Identity or other major IAM platforms.

Skills & tools

• Ping Identity Suite (PingFederate, PingAccess, PingDirectory, PingOne, PingOne DaVinci)
• Identity Protocols (SAML, OAuth 2.0, OIDC, SCIM)
• Scripting (Python, Bash, PowerShell)
• REST APIs, JSON, Postman
• LDAP, JavaScript, HTML, CSS

Practical notes

• Compensation includes benefits and is determined by market data, experience, and certifications.
• Valorem Reply is an equal opportunity employer.
• If you require reasonable accommodation due to a disability, contact jobusa@reply.com.
• The hiring process may involve AI tools for application review, though final hiring decisions are made by humans.