IAM Engineer

Primary Office Location:
626 Washington Place. Pittsburgh, Pennsylvania. 15219.

Join our team. Make a difference - for us and for your future.
Position Title: IAM (Identity and Access Management) Engineer
Business Unit: Information Security
Reports to: Manager of Security Access Management

Position Overview:
The IAM Engineer administers and engineers the Ping Identity platform to support secure, reliable, and scalable customer identity and user-management capabilities. This position serves as the Ping subject-matter expert, designs identity lifecycle and authentication processes, leads integrations, resolves complex platform issues, and prepares procedures, controls, monitoring, and training needed for phased operational support.

Primary Responsibilities:
Administers and supports Ping Identity organizations, environments, populations, directories, applications, groups, roles, authentication policies, and administrative configurations to maintain a secure, stable, and supportable customer identity platform.

Engineers customer identity lifecycle processes, including registration, identity creation, profile updates, verification, authentication enrollment, password reset, account recovery, suspension, reactivation, deactivation, and deletion, with appropriate validation and evidence.

Leads identity integration activities for applications connecting to Ping by documenting attributes, authentication requirements, roles, groups, provisioning, deprovisioning, logging, monitoring, ownership, support, and escalation requirements before production implementation.

Develops and maintains automated identity workflows, authoritative data mappings, APIs, scripts, exception handling, reconciliation, monitoring, recovery, and technical documentation to reduce manual administration and improve lifecycle reliability.

Investigates and resolves complex Ping platform, authentication, registration, lifecycle, role-assignment, integration, and data-quality issues, and coordinates incident response and root-cause remediation with security, application, infrastructure, vendor, and business partners.

Maintains least-privileged Ping administrative access, role definitions, custom roles, supporting approvals, access-review evidence, and segregation-of-duties controls, and escalates excessive access, unsupported exceptions, or unresolved ownership concerns.

Creates and maintains Ping architecture, configuration, support, troubleshooting, and customer user-management procedures, and trains Security Access Management analysts and backup administrators before routine production responsibilities are transitioned.

Plans, tests, documents, and validates Ping configuration changes, vendor releases, and platform enhancements through established Change Management processes, including implementation evidence, regression testing, rollback planning, and post-change verification.

Performs other related duties and projects as assigned.

All employees have the responsibility and the accountability to serve as risk managers for their businesses by understanding, reporting, responding to, managing and monitoring the risk they encounter daily as required by F.N.B. Corporation’s risk management program.

F.N.B. Corporation is committed to achieving superior levels of compliance by adhering to regulatory laws and guidelines.   Compliance with regulatory laws and company procedures is a required component of all position descriptions.

Minimum Level of Education Required to Perform the Primary Responsibilities of this Position:
BA or BS

Minimum # of Years of Job Related Experience Required to Perform the Primary Responsibilities of this Position:
5

Skills Required to Perform the Primary Responsibilities of this Position:
Excellent communication skills, both written and verbal
Excellent project management skills
Excellent organizational, analytical and interpersonal skills
Detail-oriented
Ability to work and multi-task in a fast paced environment
Ability to use a personal computer and job-related software
MS Excel - Intermediate Level
MS PowerPoint - Intermediate Level
Identity engineering, APIs, scripting, authentication, CIAM, troubleshooting, technical documentation, change control, Oauth/OIDC, SAML, MFA, Identity Federation, API Development and Integration & Cloud Identity Platforms

Licensures/Certifications Required to Perform the Primary Responsibilities of this Position:
Relevant Ping Identity, IAM, CIAM, cloud, Microsoft or information security certifications

Physical Requirements or Work Conditions Beyond Traditional Office Work:
N/A

Equal Employment Opportunity (EEO):
It is the policy of F.N.B. Corporation (FNB) and its affiliates not to discriminate against any employee or applicant for employment because of age, race, color, religion, sex, national origin, disability, veteran status or any other category protected by law. It is also the policy of FNB and its affiliates to employ and advance in employment all persons regardless of their status as individuals with disabilities or veterans, and to base all employment decisions only on valid job requirements. FNB provides all applicants and employees a discrimination and harassment free workplace.

FNB will not provide sponsorship for employment-based visas for this position; only candidates who are legally authorized to work in the U.S. will be considered.