Access Management - Ping / Okta Engineer

ROLE OVERVIEW An experienced Access Management leader who owns Ping and/or Okta delivery engagements for global enterprise clients, while providing technical oversight and people leadership to the existing L9 AM engineers on the team. This role flexes between hands-on delivery lead and people manager depending on engagement demands - bringing both deep federation and SSO expertise and the consulting maturity to drive client relationships at a senior level. KEY RESPONSIBILITIES Lead end-to-end Access Management engagements covering SSO, federation, MFA, and directory integration across Ping and/or Okta platforms. Own AM solution architecture decisions including federation design, token strategy, adaptive authentication, and Zero Trust alignment. Configure and extend PingFederate, PingAccess, PingDirectory, and/or Okta Workforce Identity for enterprise-scale deployments. Act as primary technical point of contact for senior client stakeholders; translate AM requirements into delivery roadmaps and architecture recommendations. Manage and mentor the two existing L9 AM engineers; conduct design reviews, support skills development, and ensure delivery quality across the team. Integrate AM platforms with enterprise directories (Active Directory, Entra ID), cloud applications, and HR systems. Contribute to pre-sales scoping, solution proposals, and effort estimation for AM opportunities. Map AM controls to compliance frameworks (NCA ECC, SAMA CSF, GDPR, ISO 27001) as required per engagement. REQUIRED QUALIFICATIONS 7-10 years of IAM experience with a minimum of 5 years in hands-on Access Management delivery (Ping, Okta, or equivalent). Deep expertise in federation protocols: SAML 2.0, OAuth 2.0, OIDC, and SCIM. Proven experience leading AM workstreams or engagements in a consulting or professional services environment. Strong working knowledge of Active Directory, Entra ID, and Conditional Access policy design. Demonstrated ability to manage or mentor junior engineers in a project or team context. Strong client-facing communication skills; comfortable presenting to both technical and executive audiences. PREFERRED QUALIFICATIONS Ping Identity Certified Professional or Okta Certified Consultant. Experience with ForgeRock, Microsoft ADFS, or additional AM platforms. Familiarity with GCC/KSA regulatory frameworks for client engagements in those markets. Exposure to Zero Trust architecture principles and their AM implications.Required Qualifications7-10 years of IAM experience with a minimum of 5 years in hands-on Access Management delivery (Ping,Okta, or equivalent).Deep expertise in federation protocols: SAML 2.0, OAuth 2.0, OIDC, and SCIM.Proven experience leading AM workstreams or engagements in a consulting or professional servicesenvironment.Strong working knowledge of Active Directory, Entra ID, and Conditional Access policy design.Demonstrated ability to manage or mentor junior engineers in a project or team context.Strong client-facing communication skills; comfortable presenting to both technical and executiveaudiences.Preferred QualificationsPing Identity Certified Professional or Okta Certified Consultant.Experience With ForgeRock, Microsoft ADFS, Or Additional AM Platforms.Familiarity with GCC/KSA regulatory frameworks for client engagements in those markets.Exposure to Zero Trust architecture principles and their AM implications.