KPMG—Associate Consultant · Ping ID

Job description

Description: §We are looking for a of IAM resource with 3+ years of experience for one of our engagements. The resource must work from our Pune/Bangalore office and willing to work on shifts Requirements: Graduation degree in any stream or equivalent / post-graduation degree/diploma, Certification in any IAM product would be an added advantage Responsibilities: Work experience §We are seeking a skilled and motivated Associate Consultant – Level L2 with minimum 24 months of experience to join our Identity Management team, focusing on PingFederate, multi-factor authentication, passwordless sign-in and secure access operations. The ideal candidate will lead L3 troubleshooting, support complex PingFederate and MFA operations, strengthen passwordless authentication controls, guide L2 team members and drive service improvements across IAM services.​ The ideal candidate will: §Have good working knowledge of PingFederate, SSO federation, identity federation, authentication policies, OAuth, OpenID Connect and SAML concepts.​ §Support PingFederate operational activities for IdP/SP connections, authentication policies, adapters, data stores, token flows and federation integrations.​ §Troubleshoot SSO, federation, token, certificate, adapter, attribute mapping, OAuth/OIDC, SAML and authentication flow issues using defined runbooks and tools.​ §Execute approved PingFederate configuration changes with validation, rollback support and stakeholder communication under guidance.​ §Support incidents, service requests, access governance activities, integration support and audit evidence collection.​ §Follow SOPs/runbooks, document troubleshooting steps and contribute to knowledge management for recurring PingFederate and federation issues.​ §Collaborate with Security, Operations, Application Owners and Service Providers on SSO deployments, incidents, changes and service improvement activities.​ §Identify issues, risks and improvement opportunities, and communicate them to the appropriate senior team member. Mandatory Certification Required: •PingFederate administration training, Ping Identity certification, or relevant IAM / federation / security certification preferred.​.​ Technical Skills Required: §Minimum 24 months of experience in identity management, access management, SSO federation operations or PingFederate administration/support.​ §Good understanding of IAM concepts including federation, authentication, authorization, SSO, identity providers and service providers.​ §Hands-on exposure to PingFederate administration, IdP/SP connections, authentication policies, adapters, token authorization and federation configuration.​ This role is for you if you have the below §Basic to good understanding of SAML, OAuth, OpenID Connect, LDAP, RADIUS, certificates, metadata, token signing/encryption and authentication troubleshooting methods.​ §Basic to good understanding of SSO, API security, SCIM, user lifecycle, attribute mapping, session management and enterprise identity integrations.​ §Experience with incident, change, problem and request management processes in a managed services or client-support environment.​ §Ability to review logs, federation traces, token claims, certificate errors, policy behavior and authentication failures to support root cause analysis and remediation.​ §Good documentation, presentation and reporting skills for SOPs, KB articles, control evidence and client updates.​.​​ Behavioral / team skills •Excellent communication (written and verbal) and interpersonal skills •Ready to work in Shifts (on 3 shift rotation pattern) •Flexibility to adapt to a variety of engagement types, working hours and work environments and locations •Proven ability to work creatively and analytically in a problem-solving environment •Desire to learn and contribute •Focused and self-motivated approach to work •Personal drive and positive work ethic to deliver results within tight deadlines and in demanding situations