[Hiring] Ping Engineer @Mondelēz International

Role Description

Are You Ready to Make It Happen at Mondelēz International? Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.

You provide software and application knowledge to support implementation of the given solutions.

How you will contribute:

• Ensure that delivered services are optimized to meet business demands and the service operations strategy.
• Plan, measure, report, and communicate service improvement initiatives.
• Serve as a consultant on issues and resolutions.
• Recommend actions to optimize investments and benefits and to mitigate risks.
• Identify suppliers, evaluate them, on-board new vendors, and establish vendor governance.
• Collaborate with management and follow-up on requisitions, purchase orders, invoices, and payments.
• Work with project resources to provide design collateral and configure software components aligned with security policy and governance.
• Ensure adherence to development and configuration standards and processes.

Act as subject matter expert (SME) for PingFederate, PingID MFA, Ping Directory:

• Lead complex application integrations and legacy migrations.
• Provide technical leadership during major incidents.
• Perform day-to-day Ping Federate, PingID MFA, and Ping Directory technical operations and task execution.
• Design and maintain SAML, oAuth, and OIDC integrations for SSO capabilities across various enterprise systems.
• Support new application onboarding (SAML/OIDC integrations).

Sample tasks include:

• Modify and maintain SP/IdP connections, Adapters (HTML Form, LDAP, MFA, Kerberos, etc.), Authentication policies, and contract mappings.
• Certificate management (Signing/encryption certificate rotation, Trust store updates).
• User attribute and claim mapping validation.
• Troubleshoot critical, high-severity incidents impacting enterprise SSO and authentication.
• Monitor, identify, and troubleshoot SSO, MFA, Ping Directory related issues to ensure integrity and availability of services.

More about this role:

• Coordinate with vendor (Ping Identity) for product defects or complex issues.
• Collaborate with application and IT teams to integrate SSO with core enterprise applications ensuring secure and user-friendly access.
• Provide technical support for SSO-MFA services, Ping Directory troubleshooting authentication failures, and resolving access issues across applications and platforms.
• Monitor PingFederate, PingID MFA, Ping Directory services availability and performance.
• Support HA/DR environments (clusters, load balancers).
• Restart services and apply approved configuration changes.
• Assist with PingFederate upgrades and patching (pre/post validation).
• Implement and customize Authentication policies and selectors, Custom adapters, and adapter instances.
• Design advanced OAuth flows: Token exchange, Fine-grained scopes, JWT customization.
• Help drive continuous quality and process improvement within your area.
• Explore automations to automate regular operations tasks.
• Mentor junior team members, helping train them on new systems and concepts.
• Present security concepts, technologies, and improvement plans to broad audience groups.
• Help team members determine security requirements for business processes and technology systems.
• Support the team in the creation, tracking, and completion of any compliance findings related to identity and access management.
• Prioritize and balance workload based on severity and deadlines for the team.
• Make risk-based decisions/recommendations when deviations from standards are required.
• Troubleshoot and fix production issues and incidents and participate in problem and change management forums.
• Identify recurring issues and perform root cause analysis (RCA).
• Propose permanent fixes and preventive measures.
• Create and update knowledge base (KB) articles for L1 / L2 teams.
• Investigate security incidents, suspicious authentication behavior.
• Ensure configurations align with security standards and compliance requirements.
• Participate in access reviews and audit evidence collection.
• Work with Application teams, Network and infrastructure teams, Security and compliance teams.
• Participate in change management (CAB) and release planning.
• Drive accountability and SLA/OLA adherence with the vendors contracted to provide support.
• Support Major PingFederate upgrades, Hotfixes, and emergency patches.
• Define monitoring and alerting standards (logs, metrics).
• Maintain technical documentation: Architecture diagrams, Integration guides, SOPs, and runbooks.

Qualifications

• 8–12+ years in IAM / Identity & Access Management.
• Minimum 5 years knowledge and experience working with and implementing Ping Federate, Ping MFA, Ping Directory, and its constituent components.
• Excellent technical thought leadership, hands-on experience, and implementation skills on Ping Federate and Ping MFA.
• Prefer knowledge and hands-on experience in one or more of the following - Active Directory, Azure AD/Microsoft Entra ID.
• Strong understanding of SSO concepts, MFA concepts, and Directory services (e.g., Active Directory, LDAP).
• Good understanding of certificate lifecycle management concepts, SSL/TLS, and certificate handling.
• Expertise in IAM tools and frameworks (e.g., SAML, OAuth, OpenID Connect, SCIM).
• Proficiency in scripting and programming (e.g., PowerShell, Java, C#) for automation and integration.
• Knowledge of cloud IAM (e.g., Azure AD, AWS IAM, Google Cloud Platform).
• Experience in waterfall, Agile, and DevSecOps methodologies and ITIL practices.
• Excellent communication skills (both written and verbal) with strong presentation and facilitation skills.
• Strong interpersonal skills, customer-centric attitude.
• Proven team player and team builder used to manage multiple stakeholders in demanding time-critical situations.
• Strong organizational and analytical skills.
• Proven ability to work creatively and analytically in a problem-solving environment.
• Ability to work in a fast-paced environment with rapidly changing priorities on multiple projects and initiatives.
• Passionate about areas of expertise, managing your own development by learning continuously from experience and seeking out development opportunities.

Benefits

• No Relocation support available.

Company Description

At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about.

• We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita, and LU biscuits; Cadbury Dairy Milk, Milka, and Toblerone chocolate; Sour Patch Kids candy and Trident gum.
• We are proud to hold the top position globally in biscuits, chocolate, and candy and the second top position in gum.
• Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world.
• Our people are energized for growth and critical to us living our purpose and values.
• We are a diverse community that can make things happen—and happen fast.

Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.