Lead iAM Engineer - Ping Identity/ForgeRock

Description :

About Client :

We are calling candidates on behalf of a global digital transformation solutions company that partners with leading enterprises to build innovative technology solutions and accelerate business growth. With strong expertise across digital engineering, cloud, cybersecurity, enterprise platforms, and modern application development, It delivers impactful solutions for Fortune 500 clients across industries.

Job Summary :

We are looking for a highly skilled and technically strong Lead IAM Engineer with deep expertise in Ping Identity and ForgeRock technologies to design, develop, and implement enterprise-grade Identity and Access Management (IAM) solutions.

The ideal candidate should have strong hands-on experience in authentication, authorization, federation, SSO, adaptive authentication, and IAM integrations across large-scale enterprise environments. This role requires strong development expertise along with architecture, leadership, and stakeholder collaboration capabilities.

You will work closely with security architects, engineering teams, DevOps teams, and business stakeholders to deliver secure, scalable, and modern IAM platforms aligned with enterprise security standards.

Key Responsibilities :

IAM Architecture & Solution Design :

- Lead the design and implementation of enterprise IAM solutions using Ping Identity and ForgeRock platforms.

- Design secure authentication, authorization, federation, and identity lifecycle management solutions.

- Develop scalable and highly available IAM architectures for enterprise applications and APIs.

- Define IAM standards, reusable frameworks, and engineering best practices.

Development & Integration :

- Develop and customize IAM workflows, authentication trees, and identity orchestration flows.

- Build and secure IAM APIs and integration services using Java, Kotlin, Spring Boot, and JavaScript.

- Integrate IAM platforms with LDAP, JDBC, SOAP, REST, HTTPS, and enterprise systems.

- Implement Single Sign-On (SSO), adaptive authentication, MFA, and risk-based authentication mechanisms.

- Design and implement OAuth 2.0, OpenID Connect (OIDC), SAML, and federation solutions.

Platform Expertise :

- Work extensively on:

1. PingAM

2. PingIDM

3. PingDS

4. PingOne Advanced Identity Cloud (AIC)

- Support ForgeRock IAM customization and identity platform enhancements.

- Ensure platform scalability, performance optimization, and security compliance.

DevOps & Engineering Practices :

- Implement CI/CD pipelines and IAM deployment automation using GitLab and Jenkins.

- Drive secure coding practices, code reviews, and automated testing strategies.

- Collaborate with DevOps and infrastructure teams for cloud-native IAM deployments.

- Support containerized IAM deployments using Docker and Kubernetes.

Leadership & Collaboration :

- Act as the technical SME for IAM and Ping Identity initiatives.

- Mentor junior and mid-level IAM engineers.

- Participate in architecture reviews, security assessments, and production readiness reviews.

- Collaborate with security, infrastructure, and application teams to deliver enterprise IAM services.

- Own technical delivery, risk management, and solution quality.

Required Skills & Qualifications :

- 7+ years of hands-on experience in Identity and Access Management (IAM).

- Strong expertise in Ping Identity platforms :

1. PingAM

2. PingIDM

3. PingDS

4. PingOne AIC

- Strong experience with :

1. OAuth 2.0

2. OpenID Connect (OIDC)

3. SAML

4. Identity Federation

- Experience implementing :

1. SSO

2. Adaptive Authentication

3. Step-up Authentication

4. Multi-Factor Authentication (MFA)

5. Risk-based Access Controls

- Strong development expertise in :

1. Java

2. Kotlin

3. JavaScript

4. Spring Boot

- Experience integrating IAM platforms with enterprise systems and APIs.

- Strong understanding of identity lifecycle management, authentication, authorization, and federation.

- Experience with GitLab, Jenkins, CI/CD pipelines, and automation practices.

- Strong analytical, troubleshooting, and problem-solving skills.

- Excellent communication and stakeholder management capabilities

Required Skills :

- IAM

- Ping Identity

- PingAM

- PingIDM

- PingDS

- PingOne AIC

- OAuth 2.0

- OIDC

- SAML

- SSO

- MFA

- Java

- Kotlin

- JavaScript

- Spring Boot

- ForgeRock

- LDAP

- CI/CD

- Jenkins

- GitLab

- Docker

- Kubernetes

- OpenID Connect (OIDC)

- Identity Federation

- Adaptive Authentication

- Step-up Authentication

- Multi-Factor Authentication (MFA)

- Risk-based Access Controls

- CI/CD pipelines

- Automation practices