Senior Identity Engineer – Ping/ForgeRock – Melbourne

Delivery Centric Pty Ltd; City of Melbourne; On-site; AUD 140,000 - 180,000; Full time

Job summary

Delivery Centric is seeking an experienced Identity Engineer to design and support IAM solutions using Ping Identity and/or ForgeRock. The role covers authentication, authorization, federation, and directory services, with backend integrations in Go or Java to deliver scalable identity systems.

You will design, implement, and maintain identity solutions, build secure authentication flows, and automate deployment through Terraform/Ansible and CI/CD pipelines, while ensuring security compliance

Qualifications

• 4+ years hands-on identity engineering with Ping Identity and/or ForgeRock platforms.

Responsibilities

• Design, implement, and maintain IAM solutions using Ping Identity and/or ForgeRock.
• Build authentication/authorization flows (OAuth/OIDC/SAML/MFA).
• Develop backend integrations using Go or Java.
• Configure federation with external IdPs/SPs and manage LDAP/DS.
• Automate deployment with IaC (Terraform, Ansible) and CI/CD pipelines.
• Troubleshoot identity issues with root-cause analysis and security compliance.

Skills

Identity engineering

OAuth 2.0

OIDC

SAML 2.0

Go

Java

LDAP

Docker

Kubernetes

Terraform

CI/CD

Security fundamentals

Tools

Ping Federate

PingAccess

PingDirectory

PingOne

ForgeRock AM

ForgeRock IDM

ForgeRock DS

ForgeRock IG

Go

Java

Groovy

Terraform

Ansible

Jenkins

GitLab CI

Job description

Senior Identity Engineer – Ping/ForgeRock – Melbourne

Delivery Centric is seeking an experienced Identity Engineer to design and support IAM solutions usingPing Identity and/or ForgeRock, covering authentication, authorization, federation and directory services. The role also involves backend integrations usingGo and/or Java to deliver secure and scalable identity solutions.

What You’ll Do

• Design, implement, and maintain identity solutions using Ping Identity (PingFederate, PingAccess, Ping Directory, PingOne) and/or ForgeRock (AM, IDM, DS, IG) products.
• Build and maintain authentication and authorization flows: OAuth 2.0, OpenID Connect, SAML 2.0, MFA, and password less/adaptive authentication.
• Develop custom plugins, nodes/authentication trees, policy scripts, and extensions in Java or Groovy (ForgeRock) or via SDKs/APIs (Ping).
• Build and integrate backend services and APIs in Go or Java that consume or extend IAM platform capabilities (token issuance, session management, user provisioning, etc.).
• Configure and manage federation with external Identity Providers/Service Providers (B2B, B2C, partner integrations).
• Own directory services architecture (LDAP/DS) including schema design, replication, and performance tuning.
• Automate deployment and configuration using Infrastructure-as-Code (Terraform, Ansible) and CI/CD pipelines.
• Troubleshoot production identity issues, perform root cause analysis, and drive resolution with minimal downtime.
• Ensure solutions meet security, compliance, and audit requirements (OWASP, NIST, ISO 27001, PCI-DSS, or relevant regulatory standards).
• Collaborate with security, platform, and application teams to define IAM standards and best practices.
• Participate in on-call rotation for critical identity infrastructure.

Must-Have Qualifications

• 4+ years of hands-on experience with Ping Identity (PingFederate/PingAccess/PingOne) and/or ForgeRock (AM/IDM/DS/IG) platforms.
• Solid understanding of identity protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, WS-Fed.
• Working proficiency in Go or Java for building backend services, custom authentication nodes, or API integrations.
• Experience with LDAP directory services (design, tuning, replication).
• Familiarity with containerized/cloud environments (Docker, Kubernetes) and cloud platforms (AWS/Azure/GCP).
• Experience with CI/CD tooling and Infrastructure-as-Code (Terraform, Jenkins, GitLab CI, etc.).
• Strong understanding of security fundamentals: TLS, encryption at rest/in transit, secrets management, least-privilege access.
• Excellent troubleshooting skills across distributed systems and network layers (HTTP, TCP/IP, DNS).

Nice-to-Have

• ForgeRock or Ping certifications (e.g., ForgeRock Certified Access Management/Directory Services Specialist, Ping Certified Professional).
• Experience with adaptive/risk-based authentication and fraud detection integrations.
• Exposure to financial services or other highly regulated environments.
• Experience with API gateways (Apigee, Kong, PingAccess as gateway) and microservices architecture.
• Familiarity with policy-as-code and zero-trust architecture principles.
• Scripting experience in Groovy, Python, or Bash for automation.

Senior Identity Engineer – Ping/ForgeRock – Melbourne

Delivery Centric is seeking an experienced Identity Engineer to design and support IAM solutions usingPing Identity and/or ForgeRock, covering authentication, authorization, federation and directory services. The role also involves backend integrations usingGo and/or Java to deliver secure and scalable identity solutions.

What You’ll Do

• Design, implement, and maintain identity solutions using Ping Identity (PingFederate, PingAccess, Ping Directory, PingOne) and/or ForgeRock (AM, IDM, DS, IG) products.
• Build and maintain authentication and authorization flows: OAuth 2.0, OpenID Connect, SAML 2.0, MFA, and password less/adaptive authentication.
• Develop custom plugins, nodes/authentication trees, policy scripts, and extensions in Java or Groovy (ForgeRock) or via SDKs/APIs (Ping).
• Build and integrate backend services and APIs in Go or Java that consume or extend IAM platform capabilities (token issuance, session management, user provisioning, etc.).
• Configure and manage federation with external Identity Providers/Service Providers (B2B, B2C, partner integrations).
• Own directory services architecture (LDAP/DS) including schema design, replication, and performance tuning.
• Automate deployment and configuration using Infrastructure-as-Code (Terraform, Ansible) and CI/CD pipelines.
• Troubleshoot production identity issues, perform root cause analysis, and drive resolution with minimal downtime.
• Ensure solutions meet security, compliance, and audit requirements (OWASP, NIST, ISO 27001, PCI-DSS, or relevant regulatory standards).
• Collaborate with security, platform, and application teams to define IAM standards and best practices.
• Participate in on-call rotation for critical identity infrastructure.

Must-Have Qualifications

• 4+ years of hands-on experience with Ping Identity (PingFederate/PingAccess/PingOne) and/or ForgeRock (AM/IDM/DS/IG) platforms.
• Solid understanding of identity protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, WS-Fed.
• Working proficiency in Go or Java for building backend services, custom authentication nodes, or API integrations.
• Experience with LDAP directory services (design, tuning, replication).
• Familiarity with containerized/cloud environments (Docker, Kubernetes) and cloud platforms (AWS/Azure/GCP).
• Experience with CI/CD tooling and Infrastructure-as-Code (Terraform, Jenkins, GitLab CI, etc.).
• Strong understanding of security fundamentals: TLS, encryption at rest/in transit, secrets management, least-privilege access.
• Excellent troubleshooting skills across distributed systems and network layers (HTTP, TCP/IP, DNS).

Nice-to-Have

• ForgeRock or Ping certifications (e.g., ForgeRock Certified Access Management/Directory Services Specialist, Ping Certified Professional).
• Experience with adaptive/risk-based authentication and fraud detection integrations.
• Exposure to financial services or other highly regulated environments.
• Experience with API gateways (Apigee, Kong, PingAccess as gateway) and microservices architecture.
• Familiarity with policy-as-code and zero-trust architecture principles.
• Scripting experience in Groovy, Python, or Bash for automation.