Platform Engineer, IAM, Authentication

Job Description
Are You Ready to Make It Happen at Mondelēz International?
Join our Mission to Lead the Future of Snacking. Make It Uniquely Yours.
You work with the information security team as a competent and experienced information security and compliance specialist.
How you will contribute
You will assess information security risks in line with internal policy and external best practices, and support security of information and IT assets by testing security systems and applying security standards, policies, and procedures. Under the guidance of global information security lead, you will implement cyber security technology and provide day-to-day business support. If relevant to your role, you will manage third-party providers to ensure that any internal or third-party adhere to standards. You will also provide information security training to appropriate teams.
What you will bring
A desire to drive your future and accelerate your career. You will bring experience and knowledge in:

• Information security, compliance and risk management
• Security solutions and their applicability to Mondelēz International
• Security strategies, awareness campaigns, policies/standards and governance
• Communicating effectively with technical specialists, leaders and peers
• Analytical and problem-solving abilities
• Being a team player by supporting and leading to achieve common goals

More about this role

• Act as subject matter expert (SME) for PingFederate, PingID MFA, and Ping Directory, providing hands-on technical leadership for complex integrations, legacy migrations, and platform enhancements.
• Perform day-to-day technical operations and execution for PingFederate, PingID MFA, and Ping Directory services.
• Design, implement, and maintain SAML, OAuth 2.0, and OpenID Connect (OIDC) integrations to enable secure Single Sign-On (SSO) across enterprise applications.
• Support new application onboarding, including:
  • Configuration and maintenance of SP/IdP connections and authentication adapters (HTML Form, LDAP, MFA, Kerberos, custom adapters).
  • Authentication policy design, selectors, contract mappings, and claim transformations.
  • Certificate lifecycle management (signing and encryption certificates, trust stores).
  • Validation of user attributes and claims.
• Serve as a senior escalation point for critical, high-severity authentication and SSO incidents, ensuring rapid stabilization and clear root-cause resolution.
• Monitor, analyze, and troubleshoot Ping platform health, availability, and performance, including:
  • Deep troubleshooting of SAML, OAuth 2.0, OIDC, and WS-Fed flows.
  • JVM analysis (thread dumps, heap dumps, memory utilization, performance bottlenecks).
  • Log and metric analysis across PingFederate, PingID, and Ping Directory.
  • Coordination with Ping Identity support for complex defects and product issues.
• Collaborate with application and IT teams to integrate secure, user-friendly SSO and MFA into core enterprise platforms.
• Provide operational support for SSO, MFA, and directory services, including:
  • Monitoring service availability and performance.
  • Supporting HA/DR architectures, clustering, and load balancing.
  • Executing approved configuration changes and service restarts.
  • Supporting upgrades, hotfixes, and emergency patches with pre- and post-deployment validation.
• Design and implement advanced OAuth capabilities, including token exchange, fine-grained scopes, and JWT customization.
• Drive continuous improvement through automation of recurring operational tasks and enhancement of platform reliability and scalability.
• Mentor and coach junior team members, sharing knowledge and strengthening overall team capability.
• Present identity and security concepts, platform roadmaps, and improvement initiatives to technical and non-technical audiences.
• Partner with stakeholders to define security requirements based on risk analysis, architectural standards, and industry best practices.

No Relocation support available
Business Unit Summary
At Mondelēz International, our purpose is to empower people to snack right by offering the right snack, for the right moment, made the right way. That means delivering a broad range of delicious, high-quality snacks that nourish life's moments, made with sustainable ingredients and packaging that consumers can feel good about.
We have a rich portfolio of strong brands globally and locally including many household names such as Oreo, belVita and LU biscuits; Cadbury Dairy Milk, Milka and Toblerone chocolate; Sour Patch Kids candy and Trident gum. We are proud to hold the top position globally in biscuits, chocolate and candy and the second top position in gum.
Our 80,000 makers and bakers are located in more than 80 countries and we sell our products in over 150 countries around the world. Our people are energized for growth and critical to us living our purpose and values. We are a diverse community that can make things happen-and happen fast.
Mondelēz International is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation or preference, gender identity, national origin, disability status, protected veteran status, or any other characteristic protected by law.
Job Type
Regular
Information Security
Technology & Digital