Senior Identity & Access Management (IAM) Consultant (m/f/d) – ForgeRock/Ping Identity

iC Consult GmbH; Barcelona, Madrid; Hybrid; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Home Office

30 Days Vacation

Health Insurance

Personal Coach

Training per Year

Employee Discounts

Restaurant Ticket

Company & Team Events

Job summary

iC Consult GmbH in Spain seeks a Senior Identity & Access Management Consultant to lead ForgeRock/Ping Identity projects and design robust authentication architectures for enterprise deployments.

You will own IAM strategy, drive Passkeys adoption, and integrate identity services across cloud and microservices, with on-site Madrid/Barcelona or remote work within Spain.

Qualifications

• Hands-on experience with Ping Identity ForgeRock ecosystem in enterprise deployments.
• IAM architecture experience translating security requirements into scalable designs.
• Deep knowledge of OAuth 2.0 and OIDC in web and native environments.
• Experience implementing Passkeys/WebAuthn and passwordless authentication.
• Security focus with cloud and CI/CD hardening practices.
• Familiarity with European identity standards (eIDAS 2.0, PSD2/SCA) is a plus.

Responsibilities

• Architect modern authentication for web, mobile, and native apps.
• Govern OAuth 2.0 and OpenID Connect flows, incl. PKCE and token lifecycles.
• Drive passwordless authentication strategies and Passkeys implementations.
• Serve as SME for Ping Identity suite (PingAM, PingIDM, PingDS) in enterprise settings.
• Integrate identity services into cloud and microservices environments with security best practices.

Skills

PingIdentity/ForgeRock ecosystem

IAM architecture

OAuth 2.0

OIDC

Passkeys/WebAuthn

Kubernetes (EKS)

Cloud security

Tools

PingAM

PingIDM

PingDS

Kubernetes

OAuth tooling

Job description

Senior Identity & Access Management (IAM) Consultant (m/f/d) – ForgeRock/Ping Identity

Join our team as aSenior Identity & Access Management (IAM) Consultant (m/f/d) – ForgeRock/Ping Identity–eitheron-site at our locations in Madrid or Barcelonaorflexibly remote from within Spain.

Your Responsibilities:

• Architect Modern Authentication: Design and implement robust authentication architectures for web, mobile, and native applications, ensuring seamless user journeys across distributed systems.
• Master Identity Standards: Architect and govern complex OAuth 2.0 and OpenID Connect (OIDC) flows, including the implementation of PKCE, secure token lifecycles, and rotation strategies.
• Drive Passwordless Innovation: Lead the strategy and design for Passkeys (WebAuthn) and passwordless authentication to eliminate credential-based risks.
• Platform Orchestration: Serve as the subject matter expert for the Ping Identity suite (formerly ForgeRock), including PingAM, PingIDM, and PingDS, to build scalable identity solutions.
• Cloud & Microservices Integration: Integrate identity services into cloud-native environments (AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices.

Your Experience:

• PingIdentity/ForgeRock Ecosystem: Hands-on experience configuring and deploying PingAM, PingIDM, and PingDS (formerly ForgeRock) in enterprise environments.
• IAM Background: Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs.
• Deep Protocol Knowledge: In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments.
• Passkey Proficiency: Hands-on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics.
• Security & Infrastructure: Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines.
• Bonus Points:
• Familiarity with European identity standards (eIDAS 2.0, LoA, and electronic signatures like AdES/QES).
• Experience with PSD2/SCA compliance, orchestrated MFA, and continuous authentication.
• Expertise in managing complex B2C/B2B identity lifecycles and device-binding strategies

What We Offer - Enjoy a Range of Benefits

• Home
  Office
• 30 Days
  Vacation
• Additional
  Health
  Insurance
• Personal
  Coach
• 10 Days of Training
  per Year
• Employee
  Discounts
• Restaurant
  Ticket
• Company &
  Team Events

Employee benefits are voluntary and may vary depending on location, work hours or other factors. They are not intended as a guarantee or commitment and may be changed or discontinued at any time.

Possible Locations for this Vacancy

Check out the available locations for this position. You can select your preferred location in the application form .

iC Consult - Remote

iC Consult - Madrid
Spain

More locations

Spain

Diversity in all dimensions is very important to our teams. We therefore include this criterion in our hiring decisions.