Mondelez International—Ping Engineer

Job description

Description: Job Description Are You Ready to Make It Happen at Mondelēz International? Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours. You provide software and application knowledge to support implementation of the given solutions. How you will contribute You will ensure that delivered services are optimized to meet business demands and the service operations strategy, plan, measure, report and communicate service improvement initiatives, and serve as a consultant on issues and resolutions. You will also recommend actions that can be taken to optimize investments and benefits and to mitigate risks. This role will require you to identify suppliers, evaluate them, on-board new vendors, establish and run vendor governance; collaborate with management and follow-up on requisitions, purchase orders, invoices, and payments; work with project resources to provide design collateral and to configure software components so they are aligned with security policy and governance; and ensure adherence to development and configuration standards and processes. What you will bring A desire to drive your future and accelerate your career. You will bring experience and knowledge in: - Working collaboratively with multiple vendors - Leading complex projects - project management - Stakeholder management and influencing skills - Managing infrastructure services delivery, support and excellence - Working in global IT function with regional or global responsibilities in an environment like Mondelēz International - Working with IT outsourcing providers using frameworks such as the IT Infrastructure Library - Working with internal and external teams and leading when necessary Job Description - Act as subject matter expert (SME) for PingFederate, PingID MFA, Ping Directory. Lead complex application integrations and legacy migrations. Provide technical leadership during major incidents. - Perform the day-to-day Ping Federate, PingID MFA and Ping Directory technical operations and task execution. - Design and maintain SAML, oAuth, and OIDC integrations to provide SSO capabilities across various enterprise systems. Support new application onboarding (SAML/OIDC integrations). Sample tasks include - - Modify and maintain SP/IdP connections, Adapters (HTML Form, LDAP, MFA, Kerberos, etc.), Authentication policies and contract mappings, - Certificate management (Signing/encryption certificate rotation, Trust store updates) - User attribute and claim mapping validation. - Troubleshoot critical, high-severity incidents impacting enterprise SSO and authentication. - Monitor, identify, and troubleshoot SSO, MFA, Ping Directory related issues to ensure the integrity and availability of the Single Sign On, and Directory services. Sample tasks include - - Handling escalated incidents from L2 related to PingFederate (SSO failures, authentication errors, federation issues). - Perform in-depth troubleshooting of SAML, OAuth 2.0, OIDC, WS-Fed issues. - Analyze JVM behavior, thread dumps, heap dumps, and performance bottlenecks. - Analyze PingFederate logs, audit logs, and system metrics to identify root causes. - Coordinate with vendor (Ping Identity) for product defects or complex issues. - Collaborate with application and IT teams to integrate SSO with core enterprise applications ensuring secure and user-friendly access. - Provide technical support for SSO-MFA services, Ping Directory troubleshooting authentication failures, and resolving access issues across applications and platforms. Sample tasks include - - Monitor PingFederate, PingID MFA, Ping Directory services availability and performance. - Support HA/DR environments (clusters, load balancers). - Restart services and apply approved configuration changes. - Assist with PingFederate upgrades and patching (pre/post validation). - Implement and customize Authentication policies and selectors, Custom adapters and adapter instances - Design advanced OAuth flows: Token exchange, Fine-grained scopes, JWT customization - Help drive continuous quality and process improvement within your area. - Explore automations to automate regular operations tasks - Mentor junior team members, helping train them on new systems and concepts. - Present security concepts, technologies and improvement plans to broad audience groups. - Help team members to determine security requirements for business processes and technology systems based upon accepted risk analysis methods, functional and performance requirements, information security architecture principles, and market-leading solutions. - Support the team in the creation, tracking, and completion of any compliance findings related to identity and access management. - Prioritize and balance workload based on severity, and deadline for the team. - Make risk-based decisions/recommendations when deviations from standards are required, including recommendations on compensating controls. - Troubleshoot and fix production issues and incidents and participate in problem and change management forums. - - Identify recurring issues and perform root cause analysis (RCA). - Propose permanent fixes and preventive measures. - Create and update knowledge base (KB) articles for L1 / L2 teams. - Investigate security incidents, suspicious authentication behavior. - Ensure configurations align with security standards and compliance requirements. - Participate in access reviews and audit evidence collection. - Work with Application teams, Network and infrastructure teams, Security and compliance teams - Participate in change management (CAB) and release planning. - Drive accountability and SLA/OLA adherence with the vendors contracted to provide support. - Support Major PingFederate upgrades, Hotfixes and emergency patches - Define monitoring and alerting standards (logs, metrics). - Maintain technical documentation: - - Architecture diagrams - Integration guides - SOPs and runbooks More about this role What you need to know about this position: Skills and Qualifications - 8–12+ years in IAM / Identity & Access Management - Minimum 5 years knowledge and experience working with and implementing Ping Federate, Ping MFA, Ping Directory, and its constituent components. - Excellent technical thought leadership, hands on experience and implementation skills on Ping Federate and Ping MFA. - Prefer knowledge, and hands on experience in one or more of the following - Active Directory, Azure AD/Microsoft Entra ID - Strong understanding of SSO concepts, MFA concepts and Directory services (e.g., Active Directory, LDAP). - Good understanding of certificate lifecycle management concepts, SSL/TLS and certificate handling - Expertise in IAM tools and frameworks (e.g., SAML, OAuth, OpenID Connect, SCIM). - Proficiency in scripting and programming (e.g., PowerShell, Java, C#) for automation and integration. - Knowledge of cloud IAM (e.g., Azure AD, AWS IAM, Google Cloud Platform). - Experience of waterfall, Agile and DevSecOps methodologies and ITIL practices - Excellent communication skills (both written and verbal) with strong presentation and facilitation skills. - Strong interpersonal skills, customer centric attitude. Can communicate with impact, in a way that is open, honest, consistent, and clear to influence and align stakeholders around a proposed approach. - Proven team player and team builder used to manage multiple stakeholders in demanding time-critical situations. - Strong organizational and analytical skills - Proven ability to work creatively and analytically in a problem-solving environment. - Ability to work in a fast-paced environment with rapidly changing priorities on multiple projects and initiatives. - Passionate about areas of expertise, managing your own development by learning continuously from experience and seeking out development opportunities. Bonus Points - ISC2 certifications like CISSP, CCSP - Ping Certifications - ITIL 4 Foundations Certification - Other IDAM products certifications No Relocation support available Business Unit Summary At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about. We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum. Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen—and happen fast. Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law. Job Type Regular Software & Applications Technology & Digital