IAM (Ping) Engineer

Job Description
Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
You provide software and applications expertise, and be responsible for implementation of the solutions.
How you will contribute
You will oversee the planning and execution of software and applications. To do so, you will manage an internal team and partner with external suppliers and use your deep technical and market knowledge and thorough understanding of our business goals find and deploy the right software and application solutions for the future. You will support programs to implement regional and global software and application strategies, offer input to financial planning and controls for software and applications on a regional and global level, collaborate with management and follow-up on requisitions, purchase orders, invoices, and payments, explores opportunities to leverage scale and drive savings, and ensure that support service level objectives and key performance indicators are accomplished.
What you will bring
A desire to drive your future and accelerate your career. You will bring experience and knowledge in :

• Managing staff and line responsibilities
• Managing large-scale software and application services
• Service delivery, support and excellence
• Program/Project management with experience managing multiple projects for budgets, resources, schedules and quality
• General technical background
• Understanding of integration and how different applications talk to each other
• Process and service orientation
• Business processes

Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
You will serve as a hands-on Ping Identity engineer responsible for supporting, operating, and maintaining enterprise authentication, federation, and directory services. This role focuses on ensuring the stability, security, and availability of PingFederate, PingID MFA, and Ping Directory to enable secure Single Sign-On (SSO) and Multi-Factor Authentication (MFA) across the enterprise.
As part of the Identity & Access Management platform team, you will provide technical expertise and operational execution to keep authentication services running reliably, securely, and in compliance with enterprise standards.
How you will contribute
You will contribute by applying product and platform principles to the day-to-day operation and support of Ping Identity services. Rather than treating integrations as one-off solutions, you will help deliver authentication and federation capabilities as standardized, repeatable, and scalable enterprise services. Your impact will come from executing operational work with a focus on reliability, improving service quality through automation and documentation, reducing recurring issues through root cause analysis, and partnering with cross functional teams to deliver secure and user-friendly access at scale.
What you will bring
Job Description

• Perform day-to-day technical operations and task execution for PingFederate, PingID MFA, and Ping Directory services.
• Operate Ping services using a product and platform mindset, emphasizing stability, scalability, reusability, and consistent service outcomes.
• Maintain and support SAML, OAuth 2.0, and OpenID Connect integrations to deliver enterprise SSO capabilities and support new application onboarding.
  • Configure and maintain SP/IdP connections, adapters (HTML Form, LDAP, MFA, Kerberos, etc.), authentication policies, and contract mappings.
  • Manage certificate lifecycle activities including signing and encryption certificate rotation and trust store updates.
  • Validate user attribute flows and claim mappings across integrations.
• Monitor, identify, and troubleshoot SSO, MFA, and directory-related issues to ensure availability, performance, and integrity of Ping platform services.
  • Troubleshoot escalated incidents related to PingFederate including SSO failures, authentication errors, and federation issues.
  • Perform deep analysis of SAML, OAuth 2.0, OIDC, and WS-Fed authentication flows.
  • Analyze PingFederate and Ping Directory logs, audit trails, and system metrics to determine root cause.
  • Engage vendor support (Ping Identity) for complex defects and advanced troubleshooting.
• Partner with application and IT teams to integrate SSO and MFA into enterprise applications using standardized patterns, reusable configurations, and documented onboarding models.
• Provide technical support for PingFederate, PingID MFA, and Ping Directory services, resolving authentication failures and access issues across enterprise platforms.
  • Monitor service health, availability, and performance.
  • Support HA/DR environments including clusters and load-balanced architectures.
  • Execute approved configuration changes, service restarts, and platform maintenance activities.
  • Assist with PingFederate upgrades and patching, including pre- and post-implementation validation.
• Drive continuous improvement of the Ping platform by identifying opportunities for automation, operational efficiency, and service quality improvements.
• Mentor junior engineers and contribute to skill development across the IAM team.
• Present authentication, federation, and MFA concepts, platform improvements, and risk considerations to technical and non-technical audiences.
• Troubleshoot and resolve production issues while actively participating in incident, problem, and change management processes.
  • Perform root cause analysis (RCA) for recurring issues and propose permanent corrective actions.
  • Develop and maintain knowledge base articles, SOPs, and runbooks to enable effective operational support.
  • Investigate suspicious authentication behavior and support security incident response activities.
  • Ensure platform configurations align with security standards, compliance requirements, and audit expectations.
  • Participate in access reviews and audit evidence collection.
  • Collaborate with application, network, infrastructure, and security teams to deliver end-to-end identity solutions.
  • Participate in change management (CAB) and release planning to support stable platform evolution.
• Drive accountability and SLA/OLA adherence with vendors providing platform support.
• Maintain high-quality technical documentation including:
  • Integration and application onboarding guides
  • Standard operating procedures (SOPs)
  • Platform runbooks and support documentation

More about this role
What you need to know about this position:
Skills and Qualifications

• Minimum 5 years of hands-on experience implementing and supporting PingFederate, PingID MFA, and Ping Directory.
• Strong technical depth and hands-on expertise with PingFederate and PingID MFA.
• Experience operating IAM capabilities using a product and platform delivery model.
• Knowledge and hands-on experience with Active Directory and/or Microsoft Entra ID (Azure AD).
• Strong understanding of SSO, MFA, and directory services (Active Directory, LDAP).
• Solid understanding of certificate lifecycle management, SSL/TLS, and cryptographic trust models.
• Expertise with IAM protocols and frameworks including SAML, OAuth 2.0, OpenID Connect, and SCIM.
• Proficiency in scripting or programming (PowerShell, Java, C#) to support automation and integrations.
• Experience with cloud IAM services across Azure, AWS, and/or Google Cloud Platform.
• Familiarity with Agile, and DevSecOps delivery models, and ITIL practices.
• Excellent written and verbal communication skills with strong stakeholder collaboration abilities.
• Proven team player and team builder used to manage multiple stakeholders in demanding, time-critical situations.
• Strong organizational and analytical skills.
• Proven ability to work creatively and analytically in a problem-solving environment.
• Ability to work in a fast-paced environment with rapidly changing priorities across multiple initiatives.
• Passion for continuous learning and ongoing professional development.

Bonus Points

• ISC2 certifications like CC, SSCP, CISSP
• Ping Certifications
• ITIL 4 Foundations Certification
• Other IAM products certifications

Within Country Relocation support available and for candidates voluntarily moving internationally some minimal support is offered through our Volunteer International Transfer Policy
Business Unit Summary
At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about.
We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum.
Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen-and happen fast.
Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Job Type
Regular
Software & Applications
Technology & Digital