SENIOR ASSOCIATE - CYBER SECURITY

Coforge · IT Services & Consulting

Chennai
On-site
Posted today
Cybersecurity

Apply on Coforge Create resume for this job

About the job

2499 - PING ID CIAM Architect

Senior CIAM / IAM Solution Architect – Identity Broker (Ping Identity)

We are specifically looking for a senior hands-on CIAM / IAM Solution Architect with strong Ping Identity and federation experience. The candidate should have proven experience designing Identity Broker architectures using OIDC/OAuth2/SAML and integrating multiple existing Identity Providers and applications. This is not primarily an Entra ID or infrastructure role. Strong PingFederate experience would be a major advantage.

Key Responsibilities

Drive and refine the solution architecture for the groupwide Identity Broker / CIAM platform

Design secure and scalable identity federation patterns across existing Identity Providers and customer-facing applications

Define and implement federation flows based on OIDC, OAuth 2.0 and SAML

Design Home Realm Discovery, identity linking, claims normalization and token management

Support the technical evaluation and prototype implementation of PingFederate and PingDirectory

Define integration patterns between the Identity Broker, existing IdPs and customer-facing applications

Design the identity data layer , including minimal customer identity attributes, identity mappings and linked accounts

Define approaches for JIT provisioning, SCIM-based provisioning and identity synchronization

Design for high availability, regional redundancy, failover and resilience

Ensure compliance with security architecture principles for authentication, sessions, tokens and identity data

Support the implementation of the initial LifeTrack prototype / pilot

Work closely with application teams and Business Unit IT teams to onboard additional applications and Identity Providers

Translate business and customer-access requirements into scalable technical architecture and implementation patterns

Produce architecture documentation, integration specifications and technical decision papers

Support architecture reviews and technical decision gates

Provide hands-on technical guidance to developers, integration engineers and project stakeholders

The project specifically foresees the broker handling federation, routing, claims/token normalization and minimal identity linking, while authentication, credentials and MFA remain with existing IdPs.

Required Skills & Experience

Must Have

8+ years of professional experience in Identity & Access Management (IAM) , security architecture or related areas

Strong hands-on experience in Customer Identity & Access Management (CIAM)

Proven experience designing Identity Broker / Federation architectures

Strong knowledge of: - OpenID Connect (OIDC)

OAuth 2.0

SAML 2.0

Identity Federation

SSO

Token and claims management

Strong experience with Ping Identity , ideally: - PingFederate

PingDirectory

Experience integrating multiple Identity Providers (IdPs) and applications within complex enterprise environments

Strong understanding of: - Identity linking

Home Realm Discovery

Claims normalization

Token issuance and validation

Session management

Experience with SCIM, JIT provisioning and user lifecycle integration

Experience designing highly available and resilient IAM platforms

Strong understanding of security principles for customer authentication and identity federation

Experience working in large-scale, distributed enterprise environments

Ability to communicate architecture decisions to both technical and non-technical stakeholders

Soft-Skills

Strong analytical and solution-oriented mindset

Excellent stakeholder management skills

Comfortable working across multiple business units and technical organizations

Ability to challenge existing architectural approaches constructively

Able to work independently and drive technical topics end-to-end

Excellent communication and documentation skills

Fluent English

Apply on Coforge