Senior Consultant, Ping Identity Advanced Identity Cloud (AIC)

We are seeking a bright, motivated Senior Consultant with a passion for architecting and implementing PingOne AIC, built on the latest technologies. You will work in a fast paced, fun and dynamic environment on a variety of projects. You'll gain exposure to clients and a variety of needs across multiple industries, collaborate within a high caliber, fast paced project team and help mentor the consultants around you while building world class systems for Fortune 500 clients. We offer competitive salaries, full benefits, extensive training and mentorship and performance based incentives. You must have the ability to travel, but for the most part work is performed remotely. Position Overview As a Senior Consultant, you will lead the design and delivery of identity and access management solutions for enterprise clients built on the Ping Identity Advanced Identity Cloud (AIC) platform. The work is typically remote, though travel may periodically be required. You must be as comfortable at the boardroom table as you are on the whiteboard and keyboard and be able to articulate the business value of identity solutions to executive stakeholders while also configuring and delivering the technical components of an AIC implementation. As a Senior Consultant, you will own the solution architecture and hands-on delivery for client engagements built on the PingOne Advanced Identity Cloud (AIC) platform, spanning both Identity Management and Access Management workstreams. This includes identity lifecycle management and synchronization across enterprise applications, directories and authoritative sources, as well as authentication, authorization, federation and access orchestration. This is a senior, client-facing delivery position; you will serve as the technical lead across the engagement lifecycle from discovery and solution design through implementation, integration, go-live and hypercare. The role moves comfortably between hands-on configuration (including identity synchronization, mappings, reconciliation, lifecycle workflows, connectors and integrations and authentication/orchestration journeys) and advisory conversations with client security and identity leadership. As a Senior Consultant you will also provide technical direction and mentorship to junior consultants while ensuring solutions are scalable, secure, supportable and aligned with the client's broader IAM architecture and business requirements. Key Responsibilities - Lead the design, configuration and deployment of AIC solutions. This includes journeys/orchestration, authentication trees and authorization policies. - Serve as the senior technical lead on client engagements. Be able to perform discovery and requirements sessions, producing solution architecture and design documents and owning delivery through implementation, testing and cutover. - Architect and implement single sign-on (SSO), multifactor authentication (MFA), federation (SAML, OAuth 2.0, OIDC) and passwordless authentication (Passkeys/WebAuthn) across web, mobile and native applications. - Design and manage identity lifecycle processes (joiner, mover, leaver) integrated with upstream authoritative source(s) and downstream target systems. - Integrate AIC with enterprise systems via REST/SOAP APIs, SCIM and custom connectors; script and extend platform capabilities (JavaScript/Groovy, scripted decision nodes). - Advise clients on IAM architecture best practices, including RBAC/ABAC models, Zero Trust principles and how AIC's fully managed SaaS model changes cloud/infrastructure responsibilities versus self-managed Ping (PingAM/PingIDM/PingDS) deployments. - Troubleshoot complex provisioning, authentication issues across production and pre-production environments; lead root-cause analysis and remediation. - Produce clear technical documentation (architecture diagrams, runbooks and configuration standards) and lead knowledge-transfer sessions with client teams. - Mentor and technically guide junior and mid-level consultants on engagements; contribute to internal AIC delivery methodology, accelerators and reusable assets. - Monitor system performance post-deployment and recommend tuning, scaling or roadmap improvements; stay current on emerging IAM trends and new Ping platform capabilities. - Support presales activities as needed, including scoping, level of effort estimation and technical input for proposals and statements of work. Required Qualifications - 5+ years of hands-on IAM consulting or engineering experience, including at least 3+ years working directly with AIC in production enterprise environments. - Demonstrated experience leading full-lifecycle AIC effort, including architecture and design through deployment and hyper care (not just administration). - Strong working knowledge of identity and security protocols: SAML, OAuth 2.0, OIDC, SCIM, WS-Fed, Kerberos and FIDO2/WebAuthn. - Solid understanding of IAM concepts including SSO, MFA, federation, RBAC/ABAC, Zero Trust and lifecycle access management. - Working proficiency with REST/SOAP APIs and at least one scripting or programming language commonly used in Ping environments (JavaScript and/or Groovy). - Comfort operating within AIC's fully managed SaaS model. This includes implementation across multiple tenant environments, coordination of ESVs (Environment Secrets & Variables), configuration of promotion pipelines and the use of tools such as Frodo for managing and debugging AIC. - Proficiency with Git-based version control (Bitbucket, GitHub or GitLab) and CI/CD pipelines for managing IAM configuration-as-code including branching, code review and release workflows. - Excellent client-facing communication skills. Be able to translate technical detail for executive stakeholders and translate business requirements into technical designs for engineers. - Bachelor's degree in computer science, Information Security or a related field, or equivalent professional experience. - Ability to work independently in a remote, client-facing consulting environment, including occasional travel to client sites. - Must be authorized to work in the United States; U.S. citizenship may be required for certain client engagements (for example, government or regulated-industry contracts). Preferred Qualifications - Certified Professional - PingOne Advanced Identity Cloud (AIC) - Prior experience in a professional services, systems integrator or IAM consultancy environment. - Experience with identity data consolidation/virtualization and directory migration projects. - Security certifications such as CISSP, CISM or CCSP. Core Competencies - Client-first consulting mindset with strong ownership over engagement outcomes - Clear, confident communicator across technical and executive audiences - Analytical problem-solver who can operate independently under ambiguity - Collaborative mentor who elevates the people around them - Comfortable balancing hands-on technical work with advisory responsibilities