Senior IAM Engineer | PingFederate | AI | Passwordless
Read straight from Equifax's careers page, verified 1d ago.Seekless can tailor your résumé to it.
Seekless can write your résumé for this posting first.
Before you apply
LocationUSA-GA-Alpharetta-JVW3
Work modehybrid
Typefull-time
SenioritySenior
Experience10+ yrs
DepartmentSecurity Governance and Compliance
Company size10,000+ people
PostedOct 2, 2026 · 1mo ago
Verified live1d ago
At a glanceSummarised by Seekless from the posting.
10+ years of experience managing PingFederate in a high-availability, clustered environment
Designed and deployed agentic AI workflows that proactively monitor system health
Experience in Zero-Downtime upgrades, configuration replication, and managing mission-critical (Tier 0) authentication traffic
Proficiency in automating PingFederate deployments using Terraform, Ansible, or Jenkins
Ability to treat identity configurations as code
Understanding of managing complex OAuth Grant Types, OpenID Connect (OIDC) policy management, and Token Exchange
Ability to be a Team Lead of up to 8-10 engineers
Developed agentic AI workflows that reduced Mean Time to Recovery (MTTR) by 40% through automated self-healing
Maintained 99.99% availability for a PingFederate cluster supporting 50k+ concurrent sessions
Led the migration of 10,000+ users from legacy MFA (SMS/OTP) to phishing-resistant FIDO2/WebAuthn passwordless flows
Ping Identity Certified Expert – PingFederate (PFAA-001)
Automated 100% of PingFederate configuration deployments using Terraform and GitOps, eliminating 95% of manual console errors
Designed custom OAuth 2.0 Grant Types and OpenID Connect (OIDC) policy fragments for 200+ integrated enterprise applications
Team Lead for a global team of 10+ IAM engineers, overseeing a $2M+ annual budget and cross-functional roadmap delivery
This position does not offer immigration sponsorship (current or future) including F-1 STEM OPT extension support
This position is not open to third-party vendors or C2C
Skills
PingFederate
Terraform
Ansible
Jenkins
OAuth
OpenID Connect (OIDC)
FIDO2
WebAuthn
GitOps
Benefits
Health insurance
401(k)
Paid time off
About the company
Equifax is where you can power your possible. If you want to achieve your true potential, chart new paths, develop new skills, collaborate with bright minds, and make a meaningful impact, we want to hear from you.
About the role
Take the helm of our mission-critical identity services, where you’ll be responsible for maintaining a zero-downtime environment for our most vital applications. You will lead the charge in sunsetting legacy credentials in favor of sophisticated passwordless journeys, all while integrating AI to optimize and self-heal our PingFederate infrastructure. This is a high-impact leadership role for someone who views identity as the ultimate frontier of both user experience and enterprise resilience.
•
This position is based out of our Alpharetta, Georgia office.
•
We believe great things happen when teams connect. Our schedule is built around 4 days of high-impact, in-office collaboration (Monday–Thursday), paired with Friday Flexibility to wrap up your week remotely.
•
This position does not offer immigration sponsorship (current or future) including F-1 STEM OPT extension support.
•
This position is not open to third-party vendors or C2C.
•
In person interviews are required.
What you’ll do
•
Perform as the technical lead for a high-performing squad of 10+ identity engineers, fostering a culture of technical excellence, continuous learning, and “zero-downtime” operational discipline.
•
Own the SSO Roadmap: Serve as the chief architect for our Tier 0 PingFederate environment, translating complex business requirements into scalable, secure, and resilient identity patterns.
•
Act as an Incident Commander: Provide executive-level technical leadership during critical outages, ensuring rapid restoration of service and leading deep-dive post-mortems to prevent recurrence.
•
Deploy Agentic AI Workflows: Build and oversee autonomous AI agents that monitor infrastructure health in real-time, enabling proactive anomaly detection and automated self-healing of the PingFederate cluster.
•
Enforce Infrastructure-as-Code (IaC): Standardize all configuration and deployment pipelines using Terraform and GitOps, ensuring that the identity fabric is reproducible, version-controlled, and free from manual drift.
•
Be a visionary who can move us toward a self-healing infrastructure, where automated agents orchestrate real-time recovery and optimization.
What experience you need
•
10+ years of experience managing PingFederate in a high-availability, clustered environment.
•
You have designed and deployed agentic AI workflows that proactively monitor system health to identify and mitigate potential outages before they impact the user base.
•
Experience in “Zero-Downtime” upgrades, configuration replication, and managing mission-critical (Tier 0) authentication traffic where even a 5-minute outage is unacceptable.
•
Proficiency in automating PingFederate deployments using Terraform, Ansible, or Jenkins.
•
Ability to treat identity configurations as code to ensure consistency across dev, staging, and production environments.
•
Beyond basic SSO, understanding of managing complex OAuth Grant Types, OpenID Connect (OIDC) policy management, and Token Exchange—critical for supporting modern mobile apps and AI-agent identities.
•
Ability to be a Team Lead of up to 8-10 engineers.
What could set you apart
•
Developed agentic AI workflows that reduced Mean Time to Recovery (MTTR) by 40% through automated self-healing.
•
Maintained 99.99% availability for a PingFederate cluster supporting 50k+ concurrent sessions.
•
Led the migration of 10,000+ users from legacy MFA (SMS/OTP) to phishing-resistant FIDO2/WebAuthn passwordless flows.
•
Ping Identity Certified Expert – PingFederate (PFAA-001).
•
Automated 100% of PingFederate configuration deployments using Terraform and GitOps, eliminating 95% of manual console errors.
•
Designed custom OAuth 2.0 Grant Types and OpenID Connect (OIDC) policy fragments for 200+ integrated enterprise applications.
•
You have been a Team Lead for a global team of 10+ IAM engineers, overseeing a $2M+ annual budget and cross-functional roadmap delivery.
Benefits
We offer comprehensive compensation and healthcare packages, 401k matching, paid time off, and organizational growth potential through our online learning platform with guided career tracks.
Are you ready to power your possible? Apply today, and get started on a path toward an exciting new career at Equifax, where you can make a difference!
Primary Location:
USA-GA-Alpharetta-JVW3
Function:
Function - Security Governance and Compliance
Schedule:
Full time