Senior IAM Engineer: ForgeRock & Zero Trust

CloudPay; España; On-site; EUR 70,000 - 110,000; Full time

Job summary

CloudPay seeks Senior Identity & Access Management Engineers to lead our identity modernisation journey and transition to a Zero Trust security model. You will own the design, implementation, and evolution of our IAM platform across a global environment.

You’ll work hands-on with ForgeRock and PingOne Advanced Identity Cloud, automate lifecycles, and drive secure, scalable identity services with strong collaboration across Security, Platform Engineering, Product, and IT teams.

Qualifications

• Strong hands-on experience delivering enterprise IAM solutions.
• Expertise in identity protocols including SAML, OAuth2, OIDC, and SCIM.
• Experience with ForgeRock, Ping Identity technologies, or similar IAM platforms.
• Knowledge of RBAC, identity governance, lifecycle management, and Zero Trust.

Responsibilities

• Design, build, and optimise identity services using ForgeRock/PingOne Advanced Identity Cloud.
• Create seamless authentication, registration, federation, and self-service user experiences.
• Develop secure integrations using SAML, OAuth2, OIDC, and SCIM.
• Build automation and CI/CD pipelines to accelerate IAM deployments.
• Implement identity governance, provisioning, and RBAC for Zero Trust architecture.
• Improve platform observability, resilience, and security monitoring.
• Troubleshoot complex authentication and access management challenges.
• Collaborate with Security, Platform Engineering, Product, and Corporate IT teams.
• Mentor engineers and champion best practices.

Skills

IAM

ForgeRock

PingOne

OAuth2

SAML

OIDC

SCIM

RBAC

Zero Trust

IaC

Tools

ForgeRock

Ping Identity

Job description

CloudPay seeks Senior Identity & Access Management Engineers to lead our identity modernisation journey and transition to a Zero Trust security model. You will own the design, implementation, and evolution of our IAM platform across a global environment.

You’ll work hands-on with ForgeRock and PingOne Advanced Identity Cloud, automate lifecycles, and drive secure, scalable identity services with strong collaboration across Security, Platform Engineering, Product, and IT teams.