Sr. IAM (Ping) Engineer

Job Description
Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
You provide software and applications expertise, and be responsible for implementation of the solutions.
How you will contribute
You will oversee the planning and execution of software and applications. To do so, you will manage an internal team and partner with external suppliers and use your deep technical and market knowledge and thorough understanding of our business goals find and deploy the right software and application solutions for the future. You will support programs to implement regional and global software and application strategies, offer input to financial planning and controls for software and applications on a regional and global level, collaborate with management and follow-up on requisitions, purchase orders, invoices, and payments, explores opportunities to leverage scale and drive savings, and ensure that support service level objectives and key performance indicators are accomplished.
What you will bring
A desire to drive your future and accelerate your career. You will bring experience and knowledge in :

• Managing staff and line responsibilities
• Managing large-scale software and application services
• Service delivery, support and excellence
• Program/Project management with experience managing multiple projects for budgets, resources, schedules and quality
• General technical background
• Understanding of integration and how different applications talk to each other
• Process and service orientation
• Business processes

More about this role
What you need to know about this position:

• Act as subject matter expert (SME) for PingFederate, PingID MFA, and Ping Directory, providing hands-on technical leadership for complex integrations, legacy migrations, and platform enhancements.
• Perform day-to-day technical operations and execution for PingFederate, PingID MFA, and Ping Directory services.
• Design, implement, and maintain SAML, OAuth 2.0, and OpenID Connect (OIDC) integrations to enable secure Single Sign-On (SSO) across enterprise applications.
• Support new application onboarding, including:
  • Configuration and maintenance of SP/IdP connections and authentication adapters (HTML Form, LDAP, MFA, Kerberos, custom adapters).
  • Authentication policy design, selectors, contract mappings, and claim transformations.
  • Certificate lifecycle management (signing and encryption certificates, trust stores).
  • Validation of user attributes and claims.
• Serve as a senior escalation point for critical, high-severity authentication and SSO incidents, ensuring rapid stabilization and clear root-cause resolution.
• Monitor, analyze, and troubleshoot Ping platform health, availability, and performance, including:
  • Deep troubleshooting of SAML, OAuth 2.0, OIDC, and WS-Fed flows.
  • JVM analysis (thread dumps, heap dumps, memory utilization, performance bottlenecks).
  • Log and metric analysis across PingFederate, PingID, and Ping Directory.
  • Coordination with Ping Identity support for complex defects and product issues.
• Collaborate with application and IT teams to integrate secure, user-friendly SSO and MFA into core enterprise platforms.
• Provide operational support for SSO, MFA, and directory services, including:
  • Monitoring service availability and performance.
  • Supporting HA/DR architectures, clustering, and load balancing.
  • Executing approved configuration changes and service restarts.
  • Supporting upgrades, hotfixes, and emergency patches with pre- and post-deployment validation.
• Design and implement advanced OAuth capabilities, including token exchange, fine-grained scopes, and JWT customization.
• Drive continuous improvement through automation of recurring operational tasks and enhancement of platform reliability and scalability.
• Mentor and coach junior team members, sharing knowledge and strengthening overall team capability.
• Present identity and security concepts, platform roadmaps, and improvement initiatives to technical and non-technical audiences.
• Partner with stakeholders to define security requirements based on risk analysis, architectural standards, and industry best practices.
• Support compliance activities, including audit evidence collection, access reviews, and remediation of IAM-related findings.
• Prioritize and balance workload based on severity, risk, and delivery timelines.
• Make informed, risk-based recommendations when deviations from standards are required, including defining compensating controls.
• Participate actively in problem, change, and release management forums, including:
  • Root cause analysis (RCA) of recurring issues.
  • Definition of permanent fixes and preventive controls.
  • Creation and maintenance of knowledge base articles, SOPs, and runbooks.
  • Investigation of security incidents and anomalous authentication behavior.
• Drive vendor accountability and ensure SLA/OLA adherence for contracted support services.
• Define and maintain monitoring, alerting, and observability standards for the Ping platform.
• Maintain high-quality technical documentation, including:
  • Architecture and integration diagrams
  • Platform standards and design patterns
  • Operational runbooks and support procedures

Job specific requirements -

• 7+ years of hands-on experience implementing and operating PingFederate, PingID MFA, and Ping Directory.
• Strong technical leadership with deep, hands-on expertise in PingFederate and PingID MFA.
• Experience with Active Directory and/or Microsoft Entra ID (Azure AD) preferred.
• Strong understanding of authentication, federation, MFA, and directory services.
• Solid knowledge of certificate lifecycle management, SSL/TLS, and cryptographic fundamentals.
• Expertise in IAM protocols and standards: SAML, OAuth 2.0, OpenID Connect, SCIM.
• Proficiency in scripting or programming for automation and integrations (e.g., PowerShell, Java, C#).
• Experience with cloud IAM platforms (Azure, AWS, Google Cloud).
• Familiarity with Agile, DevSecOps, and ITIL practices.
• Excellent written and verbal communication skills, with the ability to influence diverse stakeholders.
• Strong interpersonal skills with a customer-centric mindset.
• Proven ability to perform in high-pressure, time-critical situations.
• Strong analytical, organizational, and problem-solving skills.
• Ability to thrive in a fast-paced environment with shifting priorities.
• Commitment to continuous learning and professional development.

Good to have -

• ISC2 certifications like CISSP, CCSP
• Ping Certifications
• ITIL 4 Foundations Certification
• Other IAM products certifications

No Relocation support available
Business Unit Summary
At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about.
We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum.
Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen-and happen fast.
Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Job Type
Regular
Software & Applications
Technology & Digital