Location: Fort Mill (SC), NYC, San Diego (CA), and Austin (TX).- Hybrid
Type: Contract/C2H
We are looking for an experienced ForgeRock / PingOne Advanced Identity Cloud (AIC) Engineer to design, develop, configure, integrate, and support Identity and Access Management (IAM) solutions. The engineer will work extensively with PingOne Advanced Identity Cloud, ForgeRock Identity Cloud, AM, IDM, and DS capabilities to implement secure authentication, authorization, identity lifecycle, and federation solutions.
Key Responsibilities
- Design, configure, develop, and maintain PingOne Advanced Identity Cloud (AIC) solutions.
- Implement and customize authentication journeys for customer and workforce identity use cases.
- Configure registration, login, password management, MFA, account recovery, and progressive profiling journeys.
- Configure and troubleshoot OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and JWT-based integrations.
- Implement federation with external Identity Providers (IdPs) and Service Providers (SPs).
- Integrate AIC with LDAP/Active Directory, databases, APIs, SaaS applications, and enterprise systems.
- Configure identity lifecycle management, provisioning, synchronization, and reconciliation.
- Work with PingOne AIC connectors, managed objects, identity stores, and mappings.
- Configure and manage Identity Gateway (IG) and related API/security integrations where applicable.
- Develop and maintain REST-based integrations using AIC APIs.
- Implement security controls including MFA, adaptive authentication, session management, token policies, and access controls.
- Troubleshoot authentication failures, federation issues, token/claims problems, scripting errors, and integration issues.
- Monitor production environments and perform root-cause analysis for IAM incidents.
- Support AIC migrations, upgrades, configuration changes, and environment promotions.
- Implement CI/CD and configuration management for IAM deployments where applicable.
- Create technical documentation, solution designs, runbooks, and operational procedures.
- Collaborate with application, security, infrastructure, DevOps, and architecture teams.
Required Technical Skills
- Strong hands-on experience with ForgeRock / PingOne Advanced Identity Cloud (AIC).
- Experience with ForgeRock AM / Identity Cloud.
- Strong understanding of Authentication Journeys and authentication nodes.
- Experience with OAuth 2.0 and OpenID Connect (OIDC).
- Strong knowledge of SAML 2.0, JWT, and REST APIs.
- Knowledge of LDAP and Active Directory.
- Experience integrating IAM platforms with enterprise and cloud applications.
- Understanding of identity lifecycle management and provisioning.
- Experience troubleshooting authentication, authorization, federation, and token-related issues.
- Good understanding of IAM and security concepts such as authentication, authorization, SSO, MFA, federation, sessions, claims, scopes, and tokens.