IAM CIAM Architect (PingOne AIC & ForgeRock)

• Jobseeker Video Testimonials
  
• Employee Glassdoor Reviews
  

We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.

Requirements

We are seeking an experienced IAM / CIAM Architect with deep expertise in designing implementing and modernizing enterprise Identity and Access Management (IAM) and Customer Identity & Access Management (CIAM) solutions. The ideal candidate will have extensive hands-on experience with ForgeRock Identity Platform and PingOne Advanced Identity Cloud (AIC) enabling secure scalable and seamless authentication experiences across web mobile and API-driven applications.

This role requires a strong architecture background combined with hands-on implementation capabilities to design build integrate and modernize customer identity solutions for enterprise-scale digital platforms.

Key Responsibilities

• Architect and deliver enterprise-grade IAM/CIAM solutions for customer-facing digital platforms.
  
• Design and implement secure authentication and authorization using SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) JWT and modern identity protocols.
  
• Develop and integrate identity services across web applications mobile applications REST APIs and microservices.
  
• Lead end-to-end implementation of ForgeRock Identity Platform including:
  • ForgeRock Access Management (AM)
    
  • ForgeRock Identity Management (IDM)
    
  • ForgeRock Identity Gateway (IG)
    
  • ForgeRock Directory Services (DS)
    
• Drive identity modernization initiatives including migration and implementation of PingOne Advanced Identity Cloud (AIC).
  
• Design secure authentication journeys adaptive authentication MFA SSO federation passwordless authentication and identity lifecycle management.
  
• Collaborate with Product UX Application Development Security Infrastructure and DevOps teams to deliver secure digital identity experiences.
  
• Design and secure REST APIs using OAuth 2.0 JWT validation token management API gateways and identity-based security controls.
  
• Review solution architecture conduct technical design reviews and provide best-practice recommendations.
  
• Mentor engineering teams on identity standards authentication frameworks and secure development practices.
  
• Participate in production support troubleshooting root cause analysis and performance optimization of identity platforms.
  
• Collaborate with Cloud and DevOps teams for deployment automation and cloud-native identity implementations.
  

Required Skills

Identity & Access Management

• Customer Identity & Access Management (CIAM)
  
• Identity & Access Management (IAM)
  
• Single Sign-On (SSO)
  
• Multi-Factor Authentication (MFA)
  
• Identity Federation
  
• Identity Lifecycle Management
  
• Authentication & Authorization
  
• Adaptive Authentication
  
• Passwordless Authentication
  

Protocols & Standards

• SAML 2.0
  
• OAuth 2.0
  
• OpenID Connect (OIDC)
  
• JWT
  
• SCIM
  
• LDAP
  
• PKI
  
• X.509 Certificates
  

ForgeRock Expertise

• ForgeRock Access Management (AM)
  
• ForgeRock Identity Management (IDM)
  
• ForgeRock Identity Gateway (IG)
  
• ForgeRock Directory Services (DS)
  
• Authentication Trees
  
• Journeys
  
• Custom Nodes
  
• Identity Synchronization
  

Ping Identity

• PingOne Advanced Identity Cloud (AIC)
  
• PingOne Migration
  
• PingOne Authentication Flows
  
• PingOne Integration
  
• PingOne Federation
  

Web & API Security

• REST APIs
  
• API Security
  
• CORS
  
• Cookies
  
• Browser Security
  
• Session Management
  
• Token Security
  
• Secure Authentication Patterns
  

Cloud & DevOps (Preferred)

• Microsoft Azure
  
• AKS (Azure Kubernetes Service)
  
• Kubernetes
  
• Docker
  
• CI/CD Pipelines
  
• Infrastructure as Code
  

Programming (Preferred)

• Java
  
• JavaScript
  
• Groovy
  
• JSON
  
• XML
  
• REST
  
• Bash/Shell Scripting
  

Required Experience

• 10 years of experience in Identity & Access Management.
  
• Strong hands-on experience implementing ForgeRock Identity Platform.
  
• Experience designing enterprise-scale CIAM solutions.
  
• Proven experience implementing OAuth OIDC SAML and JWT-based authentication.
  
• Experience integrating IAM with enterprise applications APIs and cloud services.
  
• Hands-on experience migrating or implementing PingOne Advanced Identity Cloud (AIC).
  
• Experience working in Agile delivery environments.
  

Preferred Qualifications

• Experience with Azure Cloud and Kubernetes (AKS).
  
• Knowledge of Zero Trust Security Architecture.
  
• Experience with API Gateways and Microservices.
  
• Familiarity with DevSecOps practices.
  
• Ping Identity or ForgeRock certifications are highly desirable.
  

Benefits