Ping Identity Consultant

Datamatics Technologies; Al Jubayl; Hybrid; SAR 420,000 - 660,000; Full time

Job summary

Datamatics Technologies seeks a seasoned Ping Identity Consultant to design, implement, and support enterprise IAM solutions across hybrid environments in Saudi Arabia. The role demands deep IAM expertise, authentication and federation protocols, and strong leadership across architecture and production support.

You will guide projects through design, implementation, and governance, mentoring junior staff and coordinating with business and technology stakeholders.

Qualifications

• 7–10+ years total IAM experience with ForgeRock AM exposure in production.
• Proven delivery of SSO, MFA, Federation, and API Protection.
• Strong expertise in SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Hands-on experience with ForgeRock AM installation, configuration, customization, patching, and upgrades.
• Experience implementing RBAC, ABAC, risk-based access controls, and Zero Trust architectures.
• Strong Java development skills with Python, Bash, and Groovy scripting experience.
• Experience with Git workflows, CI/CD pipelines, and DevOps practices.
• Experience with DS/OpenDJ including identity stores, replication, indexing, and schema management.
• Experience with federation and token management for B2E, B2C, and partner integrations.
• Experience integrating IAM platforms with enterprise applications, APIs, and third-party systems.
• Strong experience in high availability, disaster recovery, performance tuning, capacity planning, monitoring, and incident response.
• Experience integrating IAM solutions with SIEM and PAM platforms.
• Experience supporting governance, compliance, audit readiness, and access review processes.
• Experience with cloud, containerized, and hybrid deployments.
• Hands-on experience with ForgeRock IG, Java Agents, and Web Agents.
• Experience securing microservices and APIs.
• Strong stakeholder management, communication, leadership, and mentoring skills.
• Experience creating architecture documents, solution designs, runbooks, and technical documentation.
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.

Responsibilities

• Design, implement, and maintain enterprise IAM solutions across enterprise and hybrid environments
• Deliver end-to-end IAM projects covering SSO, MFA, Federation, and API Security
• Configure, customize, troubleshoot, patch, and upgrade IAM platforms
• Design authentication flows, access policies, user journeys, and authorization frameworks
• Implement RBAC, ABAC, risk-based access controls, and Zero Trust security models
• Develop custom integrations, extensions, and automation solutions
• Configure and maintain identity repositories, directory services, and synchronization mechanisms
• Integrate IAM solutions with enterprise applications, cloud services, APIs, and third‑party platforms
• Perform performance tuning, monitoring, capacity planning, disaster recovery planning, and production support
• Support governance, compliance, audit requirements, and access review processes
• Create architecture documents, operational runbooks, deployment guides, and technical documentation
• Lead technical workstreams, mentor junior team members, and collaborate with business and technology stakeholders

Skills

IAM architecture

SAML 2.0

OAuth 2.0

OIDC

RBAC/ABAC

Zero Trust

Java development

Python scripting

Groovy scripting

Bash scripting

Stakeholder leadership

Education

Bachelor’s degree in Computer Science / IT / Engineering

ForgeRock Certifications preferred

IAM, Cybersecurity, or Cloud Security certifications

Tools

ForgeRock AM

Docker

Kubernetes

OpenShift

CI/CD

Git workflows

DevOps practices

DS/OpenDJ

Job description

Job Description – Ping Identity Consultant

Position Title: Ping Identity Consultant

Location: Saudi Arabia (KSA)

Work Mode: Onsite / Hybrid

Employment Type: Full-Time

Experience Required: 7–10+ Years

Position Summary

We are seeking a highly skilled Ping Identity Consultant to design, implement, and support enterprise Identity and Access Management (IAM) solutions across complex enterprise and hybrid environments. The ideal candidate will have extensive experience in IAM technologies, authentication and federation protocols, API security, identity governance, and modern access management frameworks. This role requires strong technical expertise, stakeholder engagement, and the ability to lead IAM initiatives from architecture through production support.

Key Responsibilities

• Design, implement, and maintain enterprise IAM solutions across enterprise and hybrid environments
• Deliver end-to-end IAM projects covering SSO, MFA, Federation, and API Security
• Configure, customize, troubleshoot, patch, and upgrade IAM platforms
• Design authentication flows, access policies, user journeys, and authorization frameworks
• Implement RBAC, ABAC, risk-based access controls, and Zero Trust security models
• Develop custom integrations, extensions, and automation solutions
• Configure and maintain identity repositories, directory services, and synchronization mechanisms
• Integrate IAM solutions with enterprise applications, cloud services, APIs, and third‑party platforms
• Perform performance tuning, monitoring, capacity planning, disaster recovery planning, and production support
• Support governance, compliance, audit requirements, and access review processes
• Create architecture documents, operational runbooks, deployment guides, and technical documentation
• Lead technical workstreams, mentor junior team members, and collaborate with business and technology stakeholders

Must-Have Skills

• 7–10+ years total IAM experience with 4–6+ years hands‑on across ForgeRock AM and exposure to IDM, IG, and DS/OpenDJ in production
• Proven delivery of SSO, MFA, Federation, and API Protection solutions
• Strong expertise in SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC)
• Hands‑on experience with ForgeRock AM installation, configuration, customization, patching, and upgrades
• Strong understanding of realms, authentication trees, nodes, sessions, and access policies
• Experience implementing RBAC, ABAC, risk-based access controls, and Zero Trust architectures
• Strong Java development skills with Python, Bash, and Groovy scripting experience
• Experience developing custom nodes, extensions, integrations, and automation solutions
• Experience with Git workflows, CI/CD pipelines, and DevOps practices
• Expertise in DS/OpenDJ including identity stores, replication, indexing, and schema management
• Experience with federation and token management for B2E, B2C, and partner integrations
• Experience integrating IAM platforms with enterprise applications, APIs, and third‑party systems
• Strong experience in high availability, disaster recovery, performance tuning, capacity planning, monitoring, and incident response
• Experience integrating IAM solutions with SIEM and PAM platforms
• Experience supporting governance, compliance, audit readiness, and access review processes
• Experience with cloud, containerized, and hybrid deployments
• Hands‑on experience with ForgeRock IG, Java Agents, and Web Agents
• Experience securing microservices and APIs
• Strong stakeholder management, communication, leadership, and mentoring skills
• Experience creating architecture documents, solution designs, runbooks, and technical documentation
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field

Preferred Skills

• Experience in Banking, Financial Services, Government, Telecom, or other highly regulated industries
• ForgeRock Certifications
• Experience with Docker, Kubernetes, or OpenShift
• Knowledge of Identity Governance and Administration (IGA) solutions
• Experience with Azure, AWS, or Google Cloud platforms
• Exposure to DevSecOps and Infrastructure-as-Code (IaC) practices
• Experience integrating with SIEM, PAM, and enterprise security monitoring solutions
• CISSP, CISM, Azure Security, AWS Security, or equivalent certifications.

Education & Certifications

• Bachelor’s Degree in Computer Science, Information Technology, Engineering, or a related discipline
• ForgeRock Certifications preferred
• Relevant IAM, Cybersecurity, or Cloud Security certifications are highly desirable