IAM Software Engineer

Job description

Valorem Reply, part of the Reply Network, is a leader in security-focused digital transformation. We advise and support our clients across cloud security, identity, and automation — enabling them to operate securely and efficiently in a complex digital world. As an IAM Software Engineer, you will help to drive the evolution of our enterprise identity ecosystem. In this role, you will design, build, and support scalable Identity and Access Management (IAM) solutions leveraging the Ping Identity Suite (PingFederate, Ping Directory, Ping Access and PingOne). As a key contributor within this IAM engineering team, you will modernize authentication journeys, automate authorization flows, and streamline secure access. Your work will help operate identity use cases with automation, resilience, and compliance in mind. ### Responsibilities - Collaborate with infrastructure, cloud, and security teams to ensure reliable orchestration at scale - Implement and maintain Ping Identity solutions for seamless SSO, MFA, and adaptive authentication. - Develop and maintain authentication policies, selectors, and adapters to support complex user journeys. - Leverage PingOne DaVinci to orchestrate low-code identity workflows and integrate third-party security services. - Utilize Ping REST APIs and scripting (e.g., Python, Bash) to automate operational tasks, monitoring, and administrative functions. - Support Joiner-Mover-Leaver (JML) processes by integrating Ping stack components with upstream identity sources and downstream SPs. - Collaborate with App Owners and Security teams to migrate legacy applications to modern protocols (OIDC/OAuth 2.0/SAML2.0/SCIM). - Troubleshoot complex authentication issues, latent LDAP queries, and synchronization errors across the Ping ecosystem. - Create and maintain technical documentation, architecture diagrams, and automated operational run books. ### Minimum Requirements - 3+ years’ experience in software engineering, IAM engineering, or API platform architecture - Experience working in “No Code / Low Code” workflow development platform. - Hands-on experience with the Ping Identity platform, including PingFederate, PingAccess, PingDirectory, and/or PingOne - Knowledge of identity protocols including SAML, OAuth 2.0, OIDC - Proficiency in RESTful APIs, JSON, and Postman Tool. - Scripting ability in Bash, PowerShell, Python, or similar ### Preferred Qualifications - Deep understanding of LDAP best practices, specifically with Ping Directory. - Experience in a DevOps environment, treating "Identity as Code" through configuration automation and CI/CD pipelines. - Strong working knowledge of JavaScript for custom business logic implementation - Advanced use of JSON for IAM related workflow payloads, REST API integrations, and event handling - Basic proficiency with HTML and CSS for custom UI, branding, and hosted page integration - Proven experience with Identity Orchestration and modernizing authentication flows (PingOne DaVinci experience is a plus). - Certifications in Ping Identity, or major IAM platforms