Senior Ping Identity IAM Architect – SSO, MFA, Zero Trust

Datamatics Technologies LLC; Al Jubayl; Hybrid; SAR 140,000 - 210,000; Full time

Job summary

Datamatics Technologies LLC seeks a seasoned Ping Identity Consultant to design, implement, and support enterprise IAM solutions across on-premises and hybrid environments in Saudi Arabia. You will lead architecture, implement SSO, MFA, and API security, and drive federation and token management initiatives.

Required 7–10+ years in IAM with ForgeRock AM expertise, strong Java and scripting skills, and experience delivering scalable, secure access controls.

Qualifications

• 7–10+ years total IAM experience with 4–6+ years hands-on across ForgeRock AM and exposure to IDM, IG, and DS/OpenDJ in production.
• Proven delivery of SSO, MFA, Federation, and API Protection solutions.
• Strong expertise in SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Hands-on experience with ForgeRock AM installation, configuration, customization, patching, and upgrades.
• Strong understanding of realms, authentication trees, nodes, sessions, and access policies.
• Experience implementing RBAC, ABAC, risk-based access controls, and Zero Trust architectures.
• Strong Java development skills with Python, Bash, and Groovy scripting experience.
• Experience developing custom nodes, extensions, integrations, and automation solutions.
• Experience with Git workflows, CI/CD pipelines, and DevOps practices.
• Expertise in DS/OpenDJ including identity stores, replication, indexing, and schema management.
• Experience with federation and token management for B2E, B2C, and partner integrations.
• Experience integrating IAM platforms with enterprise applications, APIs, and third-party systems.
• Strong experience in high availability, disaster recovery, performance tuning, capacity planning, monitoring, and incident response.
• Experience integrating IAM solutions with SIEM and PAM platforms.
• Experience supporting governance, compliance, audit readiness, and access review processes.
• Experience with cloud, containerized, and hybrid deployments.
• Hands-on experience with ForgeRock IG, Java Agents, and Web Agents.
• Experience securing microservices and APIs.
• Strong stakeholder management, communication, leadership, and mentoring skills.
• Experience creating architecture documents, solution designs, runbooks, and technical documentation.

Responsibilities

• Design, implement, and maintain enterprise IAM solutions across enterprise and hybrid environments.
• Deliver end-to-end IAM projects covering SSO, MFA, Federation, and API Security.
• Configure, patch, and upgrade IAM platforms.
• Design authentication flows, access policies, user journeys, and authorization frameworks.
• Implement RBAC, ABAC, risk-based access controls, and Zero Trust security models.
• Develop custom integrations, extensions, and automation solutions.
• Configure and maintain identity repositories, directory services, and synchronization mechanisms.
• Integrate IAM solutions with enterprise applications, cloud services, APIs, and third-party platforms.
• Perform performance tuning, monitoring, capacity planning, disaster recovery planning, and production support.
• Support governance, compliance, audit requirements, and access review processes.
• Create architecture documents, operational runbooks, deployment guides, and technical documentation.
• Lead technical workstreams, mentor junior team members, and collaborate with business and technology stakeholders.

Skills

IAM architecture

SSO

MFA

Federation

OAuth 2.0

OIDC

SAML 2.0

ForgeRock AM

Java development

Git CI/CD

DevOps practices

OpenDJ / DS

Education

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field

ForgeRock Certifications preferred

IAM/Cybersecurity/Cloud Security certifications desirable

Tools

ForgeRock AM

OpenDJ

Docker

Kubernetes

Job description

Datamatics Technologies LLC seeks a seasoned Ping Identity Consultant to design, implement, and support enterprise IAM solutions across on-premises and hybrid environments in Saudi Arabia. You will lead architecture, implement SSO, MFA, and API security, and drive federation and token management initiatives.

Required 7–10+ years in IAM with ForgeRock AM expertise, strong Java and scripting skills, and experience delivering scalable, secure access controls.