Ping Identity/LDAP Administrator

Job description

Sutherland Digital Services is hiring Senior Java Engineers to join a high-velocity platform modernization program for a top-tier U.S. telecommunications client. In this role, you will design and build production-grade Spring Boot microservices, enhance legacy Java services to modern Spring 6.1 standards, and deliver consistently within a structured, wave-based delivery model. You will work under the direction of an offshore Java Tech Lead, follow contract-first API development practices, and hold yourself to a high standard of test coverage and code quality. If you thrive in fast-paced, delivery-focused environments and have strong Spring Boot fundamentals, this is a role where your work ships to production on a defined schedule. Key Responsibilities 1. Directory Operations & Administration • Configure, tune, and maintain LDAP infrastructure (e.g., PingDirectory) to optimize replication, synchronization, and data integrity across regions. • Manage directory schemas, object classes, attributes, tree structures, and Access Control Instructions (ACIs). • Lead or support lift-and-shift initiatives to migrate legacy LDAP/Ping architectures to cloud providers like AWS or Azure. [1, 2, 3] 2. Access Management & Federation • Administer PingFederate and PingAccess environments, including custom adapters and policy management. • Configure and troubleshoot SSO integrations using federation protocols such as SAML 2.0, OAuth 2.0, OIDC (OpenID Connect), and WS-Federation. • Manage API security rules, authentication schemes, and authorization frameworks for internal and SaaS applications. [1, 2, 3] 3. Automation & Support • Write and maintain automation scripts (using Python, PowerShell, or Bash) to streamline administrative tasks. • Monitor audit trails, logs, and security events to diagnose and resolve complex federation and replication issues. • Handle SSL/TLS certificate management and ensure compliance with enterprise security policies. Required Skills & Qualifications • Core Tools: Hands-on experience with Ping Identity stack (PingFederate, PingDirectory, PingAccess). • Directory Knowledge: Deep expertise in LDAP database management, replication, and indexing strategies. • Protocols: Strong command of SAML, OAuth, OIDC, and general networking protocols. • Environment: Proficiency in both Linux/Unix and Windows Server administration. • Scripting: Basic to intermediate level in Python, Bash, or PowerShell. Preferred Qualifications • Cloud Experience: Experience managing IAM infrastructure on cloud platforms (AWS, Azure, or GCP). • Containerization: Exposure to Docker, Kubernetes, Terraform, and CI/CD pipelines. • Certifications: Ping Identity Certified Professional (PICP) or Ping Identity Certified Expert (PICE). All your information will be kept confidential according to EEO guidelines.