For a 100-day strategic assignment, NEO is looking for a Lead Ping Identity Engineer & Technical Instructor

Role Overview

As the Lead Ping Identity Engineer, you will serve as the foremost hands-on technical authority for the RVA’s Ping Identity / ForgeRock platforms. You will drive the platform’s engineering, automation, and complex deployments to ensure a robust, secure, and highly functional IAM environment. Beyond hands-on engineering, you will act as a dedicated mentor and internal trainer, leveraging your background as a Certified Ping Instructor to upskill, guide, and support junior and medior engineers on complex Ping tooling and deployment strategies.

Core Responsibilities

• Technical Implementation & Execution: Serve as the primary technical expert for the IAM platform. Configure, deploy, and troubleshoot complex identity protocols, including SAML, OIDC, SCIM, RBAC, and ABAC within the Ping ecosystem.
• Technical Mentorship & Team Enablement: Act as the internal educator and escalation point for the engineering team. Conduct technical workshops, mentor junior/medior colleagues, and guide the team through complex Ping implementations and best practices.
• Platform Engineering: Build, automate, and maintain cloud-native IAM infrastructures using advanced Infrastructure as Code (IaC) and highly automated CI/CD pipelines, ensuring the highest standards of code quality.
• Infrastructure & Environment Management: Implement and enforce strict standards for secure version control, deployment environments, and secrets management across the identity lifecycle.
• Onboarding & Integration Execution: Lead the hands-on technical onboarding of critical business applications, seamlessly integrating systems and enforcing identity governance controls.
• Resilience & Recovery: Implement the technical controls necessary to meet RPO/RTO requirements, executing Disaster Recovery setups and maintaining high availability across all IAM environments.
• Zero-Trust Execution: Technically implement and strictly enforce least-privilege access and continuous authentication principles to align the IAM platform with the enterprise Zero-Trust framework.
• Agile Technical Delivery: Drive hands-on technical delivery within Scrum/Kanban frameworks, unblocking the engineering team, maintaining high code and documentation standards, and fostering a culture of continuous technical improvement.

Required Technical Profile

• Experience: Minimum 10+ years of highly demonstrable, enterprise-level experience in IAM engineering, complex infrastructure deployment, and technical enablement.
• Mentorship & Training: Proven track record of upskilling engineering teams. Must possess the ability to translate technical designs and IAM workflows into actionable training for less experienced colleagues.
• Education: Master’s degree in Cybersecurity, Cryptanalysis & Forensics (or equivalent extensive practical experience).
• Certifications: Certified Ping Instructor (PingAM, PingIDM, PingDS, Ping Gateway, PingOne Advanced Identity Cloud, Ping One Davinci) is strictly required to facilitate internal team enablement and training. Additional advanced technical certifications in the Ping/ForgeRock ecosystem are highly preferred.
• Agile Mindset: Extensive experience delivering technical initiatives within Scrum or Kanban teams. Ability to deliver and enforce “Definition of Done” (DoD) compliant code and robust technical documentation. Advanced proficiency with Agile tooling (e.g., Jira, Confluence, Azure DevOps).
• Tooling & DevOps: Master-level expertise in Version Control (Git) and CI/CD workflows, combined with authoritative hands-on experience using Infrastructure as Code (Terraform, Ansible, etc.). Ability to review, debug, and optimize team code.
• Specialized Expertise: Direct, authoritative, hands-on technical expertise with PingOne Advanced Identity Cloud and the broader ForgeRock ecosystem.

In addition to your CV, we ask you to answer the following question (the absence or inadequacy of the answer is eliminatory): what is an RCS in the context of PingOne Advanced Identity Cloud and why do we need it?