Ping Identity Consultant

Position summary

Key responsibilities

• Design, implement, and maintain IAM solutions; deliver projects covering SSO, MFA, federation, and API security.
• Configure, customize, troubleshoot, patch, and upgrade IAM platforms; design authentication flows, access policies, user journeys, and authorization frameworks.
• Implement RBAC, ABAC, risk-based access controls, and Zero Trust models; develop integrations, extensions, and automation.
• Maintain identity repositories, directory services, and synchronization; integrate IAM with enterprise applications, cloud services, APIs, and third-party platforms.
• Handle performance tuning, monitoring, capacity planning, disaster recovery planning, and production support.
• Support governance, compliance, audit readiness, and access reviews; create architecture documents, runbooks, deployment guides, and technical documentation.
• Lead technical workstreams, mentor junior team members, and collaborate with business and technology stakeholders.

Must-have skills and qualifications

• 7–10+ years of total IAM experience, including 4–6+ years hands-on with ForgeRock AM and production exposure to IDM, IG, and DS/OpenDJ.
• Proven delivery of SSO, MFA, federation, and API protection; expertise in SAML 2.0, OAuth 2.0, and OIDC.
• Hands-on ForgeRock AM installation, configuration, customization, patching, and upgrades; knowledge of realms, authentication trees, nodes, sessions, and access policies.
• Experience with RBAC, ABAC, risk-based access controls, Zero Trust, Java, and Python, Bash, and Groovy scripting.
• Experience with custom nodes, extensions, integrations, automation, Git workflows, CI/CD pipelines, and DevOps.
• DS/OpenDJ expertise, including identity stores, replication, indexing, and schema management; federation and token management for B2E, B2C, and partner integrations.
• Experience with enterprise integrations, high availability, disaster recovery, performance tuning, capacity planning, monitoring, incident response, SIEM/PAM, governance, compliance, and access reviews.
• Hands-on ForgeRock IG, Java Agents, and Web Agents; experience securing microservices and APIs and with cloud, containerized, and hybrid deployments.
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.

Preferred skills

• Experience in banking, financial services, government, telecom, or other regulated industries is preferred.
• ForgeRock certifications, Docker, Kubernetes or OpenShift, IGA solutions, and Azure, AWS, or Google Cloud experience are preferred.
• Exposure to DevSecOps and Infrastructure-as-Code practices, and SIEM, PAM, or enterprise security monitoring integrations, is preferred.
• CISSP, CISM, Azure Security, AWS Security, or equivalent certifications are desirable.

Work mode

• The description states onsite / hybrid work mode in Saudi Arabia.