Greetings from TCS!

Role**: PingFederate Engineer

Required Technical Skill Set**: SSO integrations , SAML 2.0, OAuth 2.0, OIDC, JWT

Experience Range: 6+ years

Location: Hyderabad, Bangalore, Pune, Indore, Mumbai, Chennai

Job Description

Role & Responsibilities:

Configure, deploy, and maintain PingFederate SSO integrations using SAML, OAuth, and OIDC.
Set up IdP/SP connections, authentication policies, contract mappings, and token processors.
Configure Password Credential Validators, IdP adapters, OAuth clients, and connection templates.
Work on PingAccess policy creation, application onboarding, rule configuration, and troubleshooting.
Integrate PingFederate with AD/LDAP directories and REST APIs for authentication and attribute retrieval.
Troubleshoot login failures, SAML assertions, OAuth tokens, certificate issues, session problems, and adapter errors.
Handle certificate lifecycle management: CSR, import/export, renewal, and trust store updates.
Onboard new applications and work with dev teams to provide metadata, signing certs, and configuration guidance.
Implement MFA and federation with Ping + third-party IDPs.
Document configurations, create runbooks/playbooks, and support production deployments.
Work with clients in the banking/financial domain following strict compliance and security guidelines.

Required Skills:

Strong hands-on experience in PingFederate administration and support.
Good knowledge of SAML 2.0, OAuth 2.0, OIDC, JWT, and token flows.
Experience with PingAccess basics (policies, rules, agents).
Understanding of Okta or other IAM tools is an added advantage.
Working knowledge of AD/LDAP, REST APIs, and JSON.
Strong troubleshooting skills using logs, SAML/OIDC analyzers, and browser debugging.
Ability to interact with application teams and provide integration guidance.

PingFederate Engineer