Ping Identity Consultant

Datamatics Global Services Inc; Al Jubayl; Hybrid; SAR 180,000 - 320,000; Full time

Job summary

Ping Identity Consultant role in Saudi Arabia combines onsite and hybrid work to design, implement, and support enterprise IAM across complex environments. The candidate will lead architecture through production support, delivering SSO, MFA, federation, and API security with ForgeRock AM and related technologies.

Ideal candidates bring 7–10+ years of IAM experience, strong Java/Python scripting, RBAC/ABAC, and Zero Trust expertise, plus cloud/hybrid deployment experience and strong stakeholder

Qualifications

• 7–10+ years IAM experience with ForgeRock AM in production.
• Proven delivery of SSO, MFA, Federation, and API protection.
• Strong SAML 2.0, OAuth 2.0, and OIDC expertise.
• Hands-on ForgeRock AM installation, config, and upgrades.
• Deep understanding of realms, authentication trees, sessions, and policies.
• Experience implementing RBAC/ABAC and Zero Trust architectures.
• Strong Java development with Python, Bash, and Groovy scripting.
• Experience with Git, CI/CD, and DevOps practices.
• DS/OpenDJ identity stores, replication, indexing, and schema.
• Federation and token management for B2E/B2C/partner integrations.
• Cloud, containerized, and hybrid deployments; high availability.

Responsibilities

• Design, implement, and maintain enterprise IAM in hybrid environments.
• Deliver end-to-end IAM projects: SSO, MFA, Federation, API security.
• Configure, patch, and upgrade IAM platforms; troubleshoot issues.
• Design authentication flows, access policies, and user journeys.
• Lead domain architectures, runbooks, and deployment guides.
• Mentor junior team members and collaborate with stakeholders.
• Ensure governance, compliance, and audit readiness.
• Integrate IAM with enterprise apps, APIs, and cloud services.

Skills

IAM expertise

ForgeRock AM

SSO MFA Federation

SAML 2.0 / OAuth / OIDC

RBAC ABAC

Zero Trust

Java Python Bash

DevOps CI/CD

DS/OpenDJ

Federation token mgmt

Security governance

Education

Bachelor's degree in Computer Science, Information Technology, Engineering, or related field

Tools

ForgeRock AM

Docker

Kubernetes

OpenShift

Job description

Job Description – Ping Identity Consultant

Position Title: Ping Identity Consultant
Location: Saudi Arabia (KSA)
Work Mode: Onsite / Hybrid
Employment Type: Full-Time
Experience Required: 7–10+ Years

Position Summary

We are seeking a highly skilled Ping Identity Consultant to design, implement, and support enterprise Identity and Access Management (IAM) solutions across complex enterprise and hybrid environments. The ideal candidate will have extensive experience in IAM technologies, authentication and federation protocols, API security, identity governance, and modern access management frameworks. This role requires strong technical expertise, stakeholder engagement, and the ability to lead IAM initiatives from architecture through production support.

Key Responsibilities

• Design, implement, and maintain enterprise IAM solutions across enterprise and hybrid environments.
• Deliver end-to-end IAM projects covering SSO, MFA, Federation, and API Security.
• Configure, customize, troubleshoot, patch, and upgrade IAM platforms.
• Design authentication flows, access policies, user journeys, and authorization frameworks.
• Implement RBAC, ABAC, risk-based access controls, and Zero Trust security models.
• Develop custom integrations, extensions, and automation solutions.
• Configure and maintain identity repositories, directory services, and synchronization mechanisms.
• Integrate IAM solutions with enterprise applications, cloud services, APIs, and third-party platforms.
• Perform performance tuning, monitoring, capacity planning, disaster recovery planning, and production support.
• Support governance, compliance, audit requirements, and access review processes.
• Create architecture documents, operational runbooks, deployment guides, and technical documentation.
• Lead technical workstreams, mentor junior team members, and collaborate with business and technology stakeholders.

Must-Have Skills

• 7–10+ years total IAM experience with 4–6+ years hands-on across ForgeRock AM and exposure to IDM, IG, and DS/OpenDJ in production.
• Proven delivery of SSO, MFA, Federation, and API Protection solutions.
• Strong expertise in SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Hands-on experience with ForgeRock AM installation, configuration, customization, patching, and upgrades.
• Strong understanding of realms, authentication trees, nodes, sessions, and access policies.
• Experience implementing RBAC, ABAC, risk-based access controls, and Zero Trust architectures.
• Strong Java development skills with Python, Bash, and Groovy scripting experience.
• Experience developing custom nodes, extensions, integrations, and automation solutions.
• Experience with Git workflows, CI/CD pipelines, and DevOps practices.
• Expertise in DS/OpenDJ including identity stores, replication, indexing, and schema management.
• Experience with federation and token management for B2E, B2C, and partner integrations.
• Experience integrating IAM platforms with enterprise applications, APIs, and third-party systems.
• Strong experience in high availability, disaster recovery, performance tuning, capacity planning, monitoring, and incident response.
• Experience integrating IAM solutions with SIEM and PAM platforms.
• Experience supporting governance, compliance, audit readiness, and access review processes.
• Experience with cloud, containerized, and hybrid deployments.
• Hands-on experience with ForgeRock IG, Java Agents, and Web Agents.
• Experience securing microservices and APIs.
• Strong stakeholder management, communication, leadership, and mentoring skills.
• Experience creating architecture documents, solution designs, runbooks, and technical documentation.
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.

Preferred Skills

• Experience in Banking, Financial Services, Government, Telecom, or other highly regulated industries.
• ForgeRock Certifications.
• Experience with Docker, Kubernetes, or OpenShift.
• Knowledge of Identity Governance and Administration (IGA) solutions.
• Experience with Azure, AWS, or Google Cloud platforms.
• Exposure to DevSecOps and Infrastructure-as-Code (IaC) practices.
• Experience integrating with SIEM, PAM, and enterprise security monitoring solutions.
• CISSP, CISM, Azure Security, AWS Security, or equivalent certifications.

Education & Certifications

• Bachelor’s Degree in Computer Science, Information Technology, Engineering, or a related discipline.
• ForgeRock Certifications preferred.
• Relevant IAM, Cybersecurity, or Cloud Security certifications are highly desirable.