Ping Identity Engineer

Identity Engineer

At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.

We are an international engineering company providing services in the field of technical consulting, design, and investment project management. Global Business Services center located in Krakow provide global support for our line of business and corporate teams in the following areas:

• Finance
• Accounting
• HR
• IT
• Procurement
• Payroll
• Project Management

GBS centralizes some of the processes across Jacobs and focuses on process excellence while also advancing the transformation initiative through additional work migration. We are seeking an experienced Identity Engineer to design, implement, and support enterprise identity and access management (IAM) solutions using Ping Identity technologies, with a primary focus on PingOne, PingFederate, and Ping DaVinci. This role involves close collaboration with security, infrastructure, application, and business teams to deliver secure, scalable authentication, authorization, and identity orchestration solutions across cloud and on-premises environments.

Key Responsibilities:

• Design, implement, and maintain IAM solutions using PingOne and PingFederate,
• Configure and support SSO (SAML, OIDC, OAuth 2.0), federation, and authentication/authorization policies,
• Implement secure access models for workforce, partner, and customer identities,
• Design and build identity flows using Ping DaVinci (low-code / no-code),
• Orchestrate authentication journeys (MFA, risk-based, passwordless, adaptive),
• Integrate DaVinci flows with third-party services (IdPs, MFA providers, APIs),
• Manage platform configurations across non-production and production environments,
• Perform upgrades, patching, and troubleshooting (authentication, federation, policies),
• Monitor system performance, logs, and platform health,
• Integrate Pingsolutions with SaaS applications, custom applications, and directories (AD, LDAP)
• Automate IAM processes using APIs, scripting (PowerShell, Python), and CI/CD,
• Apply security best practices (least privilege, strong authentication, secure token handling),
• Support audit and compliance activities (e.g., SOX, ISO 27001),
• Maintain technical and operational documentation.

We offer:

• Rewarding employment - full-time employment based on an employment contract (umowa o pracę) with a salary that matches your qualifications,
• Flexible work model - possibility to work remotely or in a hybrid setup,
• Standard working hours from Monday to Friday, 9:00 - 17:00,
• Comprehensive benefits, including Lux Med medical care, psychological support, life insurance, My Benefit cafeteria system, Multisport card co-financing, and a car/bike park sharing system,
• Co-financed holidays - enjoy "Wczasy pod Gruszą" for a well-deserved break,
• Inclusive networks - join our diverse employee networks like Women's Network, OneWorld, PRISM, Careers Network, Green Team, SpeakUp, Collectively, and more,
• Continuous learning - participate in our Graduate Development Program, Learners' Community, and self-learning platforms,
• Language courses - enhance your skills with courses in English, German, and Polish.

Here's what you'll need:

• 3-7+ years of experience in IAM, security engineering, or related areas,
• Hands-on experience with Ping Identity products: PingOne, PingFederate and Ping DaVinci,
• Strong understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), federation concepts,
• Experience integrating IAM with Active Directory / LDAP, cloud platforms and SaaS applications, troubleshooting experience across authentication and authorization flows,
• Experience in enterprise IAM environments,
• Strong analytical and problem-solving skills,
• Ability to translate business requirements into technical solutions,
• Effective communication and teamwork skills,
• Experience in creating technical documentation.

Nice to have:

• Experience with MFA solutions (Ping MFA, Duo, Okta, or similar),
• Familiarity with Zero Trust or adaptive authentication models,
• Knowledge of cloud platforms (Azure, AWS, GCP),
• Experience with API security and access tokens,
• Scripting or automation experience,
• Ping Identity certifications.

We know that if we are inclusive, we're more connected, and if we are diverse, we're more creative. We accept people for who they are. Find out more about life at Jacobs. As a Disability Confident employer, we will interview all disabled applicants who meet the criteria for a vacancy. If you require further support or reasonable adjustments with regards to the recruitment process (for example, you require the application form in a different format), please contact the team recruitmentpoland@jacobs.com.