IAM Platform Engineer - SSO, PAM, OAuth & AIC

Ampstek; Fort Mill (SC); On-site; USD 90,000 - 130,000; Full time

Job summary

Ampstek seeks an experienced IAM Engineer to design, implement, and manage IAM solutions using ForgeRock AIC and Ping Identity AIC across a large enterprise. You will configure access policies, manage identity lifecycles, and integrate APIs to enhance IAM functionality.

You will drive SSO implementations with SAML, OAuth2, and OIDC, perform security audits in line with NIST and SOC2, and contribute to IAM governance, PAM, and CIAM initiatives while focusing on high availability and robust

Qualifications

• Experience designing, implementing, and managing IAM solutions.
• Hands-on ForgeRock and Ping Identity AIC deployments.
• SRE/SLM and resilience testing in IAM environments.
• API-driven IAM automation and OAuth2/OIDC integration.
• Audit and compliance with NIST and SOC2 standards.
• Familiar with PAM, IGA tools (Okta, SailPoint, PingOne).

Responsibilities

• Design and implement IAM policies and access controls.
• Configure identity lifecycle management processes.
• Develop and maintain IAM automation workflows.
• Perform security audits and vulnerability remediation in IAM.
• Lead SSO deployments using SAML, OAuth2, and OIDC.

Skills

ForgeRock IAM

Ping Identity IAM

Okta IAM

SAML SSO

OAuth 2.0

OIDC

CyberArk PAM

IGA

Automation scripting

API integrations

Tools

PingFederate

PingOne

SiteMinder

ForgeRock Identity Platform

ForgeRock Directory Services

Web Agents

Job description

Ampstek seeks an experienced IAM Engineer to design, implement, and manage IAM solutions using ForgeRock AIC and Ping Identity AIC across a large enterprise. You will configure access policies, manage identity lifecycles, and integrate APIs to enhance IAM functionality.

You will drive SSO implementations with SAML, OAuth2, and OIDC, perform security audits in line with NIST and SOC2, and contribute to IAM governance, PAM, and CIAM initiatives while focusing on high availability and robust