IAM Engineer

Ampstek; Fort Mill (SC); On-site; USD 90,000 - 130,000; Full time

Job summary

Ampstek seeks an experienced IAM Engineer to design, implement, and manage IAM solutions using ForgeRock AIC and Ping Identity AIC across a large enterprise. You will configure access policies, manage identity lifecycles, and integrate APIs to enhance IAM functionality.

You will drive SSO implementations with SAML, OAuth2, and OIDC, perform security audits in line with NIST and SOC2, and contribute to IAM governance, PAM, and CIAM initiatives while focusing on high availability and robust

Qualifications

• Experience designing, implementing, and managing IAM solutions.
• Hands-on ForgeRock and Ping Identity AIC deployments.
• SRE/SLM and resilience testing in IAM environments.
• API-driven IAM automation and OAuth2/OIDC integration.
• Audit and compliance with NIST and SOC2 standards.
• Familiar with PAM, IGA tools (Okta, SailPoint, PingOne).

Responsibilities

• Design and implement IAM policies and access controls.
• Configure identity lifecycle management processes.
• Develop and maintain IAM automation workflows.
• Perform security audits and vulnerability remediation in IAM.
• Lead SSO deployments using SAML, OAuth2, and OIDC.

Skills

ForgeRock IAM

Ping Identity IAM

Okta IAM

SAML SSO

OAuth 2.0

OIDC

CyberArk PAM

IGA

Automation scripting

API integrations

Tools

PingFederate

PingOne

SiteMinder

ForgeRock Identity Platform

ForgeRock Directory Services

Web Agents

Job description

Experience in Identity and Access Management (IAM) Engineer specializing in designing, implementing, and managing IAM solutions using ForgeRock AIC / Ping Identity AIC.

Hands on in configuring access policies, permissions, and identity lifecycle management processes.

Hands on in scripting, journey development, and API integrations to enhance IAM functionality.

Strong knowledge in performance tuning, troubleshooting, and ensuring high availability and security of IAM infrastructure.

Implementation experience in ForgeRock AIC / Ping Identity AIC for a large enterprise, securing 50,000+ identities.

SRE / SLM initiatives such as service-level objectives (SLOs), error budgeting, and resilience testing across IAM platforms.

Development of API-driven IAM automation workflows, reducing manual effort and improving security posture.

Enhanced authentication security by integrating OAuth 2.0 and OpenID Connect (OIDC) into the IAM platform.

IAM configuration audit , adherence to NIST and SOC2 standards.

Identity and access assessments and identify vulnerabilities and remediations within ForgeRock CIAM.

Managed and configured ForgeRock CIAM components, including ForgeRock Identity Platform, ForgeRock Directory Services, and ForgeRock CIAM Identity Gateway.

Security audits and assessments. Good understanding in Okta implementations

Develop and enforce IAM policies and procedures to enhance security posture and compliance.

Identity Governance and Architect (IGA) and Privileged Access Management (PAM) tools (Okta, Sailpoint, PingOne Advanced Identity Cloud)

Led the design and implementation of CyberArk's Privileged Access Management (PAM) solutions to safeguard critical assets.

Designed and implemented Single Sign-On (SSO) solutions using SAML, enabling seamless access to multiple applications with a single set of credentials.

Integrated OAuth2 for secure API authorization, allowing third-party applications controlled access to internal resources.

Expertise in Installation, configuration, deployment, and maintenance of the PingFederate, PingOne and

Ping One Accesss. Experienced in installing, configuring SiteMinder policy servers, Web agents, Web Agent