Staff Software Engineer

About Ping Identity: At Ping Identity, we believe in making digital experiences both secure and seamless for all users, without compromise. We call this digital freedom. And it's not just something we provide our customers. It's something that inspires our company. People don't come here to join a culture that's built on digital freedom. They come to cultivate it. Our intelligent, cloud identity platform lets people shop, work, bank, and interact wherever and however they want. Without friction. Without fear. While protecting digital identities is at the core of our technology, protecting individual identities is at the core of our culture. We champion every identity. One of our core values, Respect Individuality, reminds us to celebrate differences so you are empowered to bring your authentic self to work. We're headquartered in Denver, Colorado and we have offices and employees around the globe. We serve the largest, most demanding enterprises worldwide, including more than half of the Fortune 100. At Ping Identity, we're changing the way people and businesses think about cybersecurity, digital experiences, and identity and access management. Join our team: Join the PingOne SSO team within the PingOne Multi-Tenant SaaS product development organization. This team builds, enhances, and operates PingOne Authentication and SSO as a market-leading service through continuous innovation and service performance improvements. The team owns core customer-facing services and capabilities related to applications, resources, external identity providers, and sign-on policies. In practice, the team delivers the authentication and single sign-on layer of PingOne’s multi-tenant cloud identity platform, including standards-based SSO for SaaS and custom applications using SAML, OIDC, and OAuth 2.0, plus integrations with external identity providers and application connectivity. We are looking for a Staff Software Engineer who can turn ideas into production capabilities and work well in a fast-paced, collaborative, cross-functional, and global engineering organization. The ideal candidate brings strong software engineering fundamentals, sound technical judgment, creative problem-solving ability, and a passion for innovation and experimentation. This role is well suited to someone who enjoys working across services, APIs, developer workflows, and user-facing capabilities, and who can use modern AI-assisted engineering tools pragmatically to accelerate discovery, design, and delivery. What you'll do Design and delivery of major features across PingOne Authentication and SSO services in a high-scale multi-tenant SaaS environment. Architect and implement secure, reliable Java-based microservices and APIs that support authentication, authorization flows, SSO, federation, and application integrations. Help drive technical decisions that balance product requirements, system performance, reliability, security, and operational simplicity. Partner closely with Product Management, Architecture, UX, SRE, and peer engineering teams to shape solutions from discovery through production rollout. Improve service resilience, observability, operability, and deployment safety for mission-critical customer-facing services. Help raise the team’s engineering standards around testability, maintainability, and production readiness in a continuous deployment environment. Drive quality strategy and automation approaches in our test automation assets in a continuous integration, continuous deployment environment. Use modern engineering and AI-assisted development practices to improve team effectiveness, quality, and delivery speed. Participate in the team’s on-call rotation and help lead incident response, root-cause analysis, and follow-through actions for production issues. Essential Qualifications Working knowledge of OIDC, SAML, and WS-Fed, including experience with SSO/federation integrations, protocol troubleshooting, and identity provider/service provider configur…