IAM Engineer

Ampstek; Fort Mill (SC); On-site; USD 120,000 - 160,000; Full time

Job summary

Ampstek in Fort Mill, SC seeks an IAM Engineer to design, implement, and manage enterprise IAM solutions across ForgeRock AIC, Ping Identity AIC, and CIAM platforms. You will implement access policies, lifecycle management, and security controls to support 50,000+ identities.

Responsibilities include scripting, API integrations, SSO implementations (SAML/OIDC), OAuth 2.0, and ongoing IAM governance, audits, and compliance with NIST/SOC2 standards.

Qualifications

• Experience designing and implementing enterprise IAM solutions.
• Deep knowledge of ForgeRock and Ping Identity AIC platforms.
• Experience with OAuth 2.0, OpenID Connect, and SAML.
• Ability to script and develop API integrations for IAM workflows.
• Familiarity with IAM governance, audits, and SOC 2/NIST compliance.

Responsibilities

• Design, implement, and manage IAM solutions for large enterprises.
• Configure access policies, permissions, and identity lifecycle management.
• Develop API-driven IAM automation and integration workflows.
• Implement SSO across multiple applications with SAML/OIDC.
• Conduct security audits and contribute to SOC2/NIST compliance.

Skills

IAM Engineer

ForgeRock AIC

Ping Identity AIC

OAuth 2.0

OIDC

SAML

SSO

Okta

SailPoint

PingOne Advanced Identity Cloud

CyberArk PAM

IGA

SiteMinder

SOC2/NIST

CIAM

Tools

ForgeRock CIAM components

ForgeRock Identity Platform

ForgeRock Directory Services

PingFederate

PingOne

SiteMinder Web Agents

Job description

• Experience in Identity and Access Management IAM Engineer specializing in designing, implementing, and managing IAM solutions using ForgeRock AIC / Ping Identity AIC.
• Hands on in configuring access policies, permissions, and identity lifecycle management processes.
• Hands on in scripting, journey development, and API integrations to enhance IAM functionality.
• Strong knowledge in performance tuning, troubleshooting, and ensuring high availability and security of IAM infrastructure.
• Implementation experience in ForgeRock AIC / Ping Identity AIC for a large enterprise, securing 50,000+ identities.
• SRE / SLM initiatives such as service-level objectives (SLOs), error budgeting, and resilience testing across IAM platforms.
• Development of API-driven IAM automation workflows, reducing manual effort and improving security posture.
• Enhanced authentication security by integrating OAuth 2.0 and OpenID Connect (OIDC) into the IAM platform.
• IAM configuration audit , adherence to NIST and SOC2 standards.
• Identity and access assessments and identify vulnerabilities and remediations within ForgeRock CIAM.
• Managed and configured ForgeRock CIAM components, including ForgeRock Identity Platform, ForgeRock Directory Services, and ForgeRock CIAM Identity Gateway.
• Security audits and assessments. Good understanding in Okta implementations
• Develop and enforce IAM policies and procedures to enhance security posture and compliance.
• Identity Governance and Architect (IGA) and Privileged Access Management (PAM) tools (Okta, Sailpoint, PingOne Advanced Identity Cloud)
• Led the design and implementation of CyberArk's Privileged Access Management (PAM) solutions to safeguard critical assets.
• Designed and implemented Single Sign-On (SSO) solutions using SAML, enabling seamless access to multiple applications with a single set of credentials.
• Integrated OAuth2 for secure API authorization, allowing third-party applications controlled access to internal resources.
• Expertise in Installation, configuration, deployment, and maintenance of the PingFederate, PingOne and
• Ping One Accesss. Experienced in installing, configuring SiteMinder policy servers, Web agents, Web Agent