PingOne AIC Architect

TEEMA; Toronto; Hybrid; CAD 60,000 - 80,000; Full time

Job summary

A technology solutions company is seeking a PingOne AIC Architect to manage and implement Identity & Access Management solutions. The ideal candidate will have deep technical expertise in ADFS, SAML, and OAuth, along with experience in ForgeRock Identity Cloud. This position offers a competitive hourly rate ranging from $70 to $117 and allows for mostly remote work from Toronto, Ontario. If selected, candidates will be contacted directly regarding the next steps.

Qualifications

• Strong technical foundation in IAM concepts and experience with ADFS, SAML, and OAuth.
• Experience managing applications in ForgeRock Identity Cloud leveraging OIDC, SAML, and OAuth.
• Knowledge of security best practices related to SAML and OAuth.

Responsibilities

• Configure, administer, and troubleshoot ADFS, SAML, and OAuth protocols.
• Develop custom workflows and User Journeys in ForgeRock ID Cloud.
• Implement security measures in identity solutions.

Skills

Identity & Access Management (IAM)

ADFS

SAML

OAuth

ForgeRock Identity Cloud

REST APIs

Java/J2EE

JavaScript

Groovy script

Enterprise Directory/LDAP

Job description

Job Title: PingOne AIC Architect
Job ID: 84929
Location: Toronto, Ontario – Mostly Remote

What you must have

• In-depth and strong technical foundation in Identity & Access Management (IAM) concepts along with practical experience in configuring, administering, and troubleshooting ADFS, SAML, and OAuth protocols.
• Strong working experience with creating and managing applications within ForgeRock Identity Cloud leveraging OIDC, SAML, and OAuth standards.
• Familiarity with identity federation and single sign-on (SSO) concepts, particularly in relation to ADFS and ForgeRock.
• Knowledge of security best practices related to SAML and OAuth, including experience with implementing security measures in identity solutions.
• Developing custom workflows and User Journeys in ForgeRock ID Cloud for user onboarding, sign-in, and pass-through authentication.
• Development experience with provisioning, de-provisioning, and Just-in-Time (JIT) creation and migration of identities.
• Development experience with REST APIs and JSON/XML data manipulation and updates.
• Experience with migration of data and configuration among different tenants using OOB GUI and APIs.
• Development experience with both .NET and Java-based native and custom connectors such as Scripted, REST, CSV, LDAP, and Database.
• Development experience with Java/J2EE, JavaScript, and Groovy script to implement custom IGA workflows for create, update, and delete functions.
• Development experience with writing scripts and code to fetch and manipulate data in assertions and data sources.
• Experience with Enterprise Directory/LDAP and Databases.

Nice to have

• Experience with customization of ForgeRock IDC native UI, hosted pages, and language localization.
• Experience of deploying RCS as a cluster (client and server mode) in a highly available environment.
• Understanding of Identity Gateway.
• Documenting and designing use cases, test cases, and performing unit testing.
• Familiarity with CI/CD pipelines and DevOps deployment methodology.

Salary/Rate Range: $70.00 - $117.00 /hour

Thank you for your interest in this opportunity. If you are selected to move forward in the process, we will contact you directly. If you do not hear from us, we encourage you to continue visiting our website for other roles that may be a good fit.

For more information about TEEMA and to consider other career opportunities, please visit our website at www.teemagroup.com