IAM / CIAM Architect (PingOne AIC & ForgeRock)

Alignity; Hyderabad; Hybrid; INR 2,600,000 - 3,800,000; Full time

Job summary

Alignity is seeking an experienced IAM / CIAM Architect to design and implement enterprise-grade identity solutions for our digital platforms. The role emphasizes hands-on ForgeRock platform work and migration to PingOne Advanced Identity Cloud (AIC), with a strong focus on secure authentication journeys.

You will collaborate with product, DevOps, and security teams in a hybrid, contract-to-hire arrangement across multiple Indian locations including Hyderabad and Bengaluru.

Qualifications

• 10+ years of IAM/CIAM experience.
• Deep expertise with ForgeRock Identity Platform and PingOne AIC.
• Experience designing enterprise CIAM solutions and integrating IAM with cloud services.

Responsibilities

• Architect and deliver enterprise-grade IAM/CIAM solutions for customer-facing platforms.
• Design secure authentication with SAML 2.0, OAuth 2.0, OIDC, JWT.
• Lead end-to-end ForgeRock implementation and PingOne migrations.

Skills

IAM & CIAM

SAML 2.0

OAuth 2.0

OpenID Connect

ForgeRock

Tools

ForgeRock AM

ForgeRock IDM

PingOne AIC

Azure AKS

Kubernetes

Job description

Do you love a career where you Experience, Grow & Contribute at the same time, while earning at least 10% above the market? If so, we are excited to have bumped onto you. Learn how we are redefining the meaning of work, and be a part of the team raved by Clients, Job-seekers and Employees. Jobseeker Video Testimonials Employee Glassdoor Reviews

If you are a IAM / CIAM Architect (PingOne AIC & ForgeRock) consultant looking for excitement, challenge and stability in your work, then you would be glad to come across this page. We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details. Check if you are up for maximizing your earning/growth potential, leveraging our Disruptive Talent Solution.

Role: IAM / CIAM Architect (PingOne AIC & ForgeRock) Experience: 8+ Years Location: Hyderabad | Bengaluru | Pune | Chennai | Mumbai | Kolkatta | Gurgram Work Mode: Hybrid Type: Contract to Hire Notice Period: 0-30 days

Requirements We are seeking an experienced IAM / CIAM Architect with deep expertise in designing, implementing, and modernizing enterprise Identity and Access Management (IAM) and Customer Identity & Access Management (CIAM) solutions. The ideal candidate will have extensive hands-on experience with ForgeRock Identity Platform and PingOne Advanced Identity Cloud (AIC), enabling secure, scalable, and seamless authentication experiences across web, mobile, and API-driven applications. This role requires a strong architecture background combined with hands-on implementation capabilities to design, build, integrate, and modernize customer identity solutions for enterprise-scale digital platforms.

Key Responsibilities Architect and deliver enterprise-grade IAM/CIAM solutions for customer-facing digital platforms. Design and implement secure authentication and authorization using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), JWT, and modern identity protocols. Develop and integrate identity services across web applications, mobile applications, REST APIs, and microservices. Lead end-to-end implementation of ForgeRock Identity Platform, including: ForgeRock Access Management (AM) ForgeRock Identity Management (IDM) ForgeRock Identity Gateway (IG) ForgeRock Directory Services (DS) Drive identity modernization initiatives, including migration and implementation of PingOne Advanced Identity Cloud (AIC). Design secure authentication journeys, adaptive authentication, MFA, SSO, federation, passwordless authentication, and identity lifecycle management. Collaborate with Product, UX, Application Development, Security, Infrastructure, and DevOps teams to deliver secure digital identity experiences. Design and secure REST APIs using OAuth 2.0, JWT validation, token management, API gateways, and identity-based security controls. Review solution architecture, conduct technical design reviews, and provide best-practice recommendations. Mentor engineering teams on identity standards, authentication frameworks, and secure development practices. Participate in production support, troubleshooting, root cause analysis, and performance optimization of identity platforms. Collaborate with Cloud and DevOps teams for deployment automation and cloud-native identity implementations.

Required Skills Identity & Access Management Customer Identity & Access Management (CIAM) Identity & Access Management (IAM) Single Sign-On (SSO) Multi-Factor Authentication (MFA) Identity Federation Identity Lifecycle Management Authentication & Authorization Adaptive Authentication Passwordless Authentication Protocols & Standards SAML 2.0 OAuth 2.0 OpenID Connect (OIDC) JWT SCIM LDAP PKI X.509 Certificates ForgeRock Expertise ForgeRock Access Management (AM) ForgeRock Identity Management (IDM) ForgeRock Identity Gateway (IG) ForgeRock Directory Services (DS) Authentication Trees Journeys Custom Nodes Identity Synchronization Ping Identity PingOne Advanced Identity Cloud (AIC) PingOne Migration PingOne Authentication Flows PingOne Integration PingOne Federation Web & API Security REST APIs API Security CORS Cookies Browser Security Session Management Token Security Secure Authentication Patterns Cloud & DevOps (Preferred) Microsoft Azure AKS (Azure Kubernetes Service) Kubernetes Docker CI/CD Pipelines Infrastructure as Code Programming (Preferred) Java JavaScript Groovy JSON XML REST Bash/Shell Scripting

Required Experience 10+ years of experience in Identity & Access Management. Strong hands-on experience implementing ForgeRock Identity Platform. Experience designing enterprise-scale CIAM solutions. Proven experience implementing OAuth, OIDC, SAML, and JWT-based authentication. Experience integrating IAM with enterprise applications, APIs, and cloud services. Hands-on experience migrating or implementing PingOne Advanced Identity Cloud (AIC). Experience working in Agile delivery environments.

Preferred Qualifications Experience with Azure Cloud and Kubernetes (AKS). Knowledge of Zero Trust Security Architecture. Experience with API Gateways and Microservices. Familiarity with DevSecOps practices. Ping Identity or ForgeRock certifications are highly desirable.

Benefits Visit us at http://alignity.io/careers.

Alignity Solutions is an Equal Opportunity Employer, M/F/V/D.