Identity Gateway Architect (ForgeRock/PingGateway)

Peraton; Herndon (VA); On-site; USD 80,000 - 128,000; Full time

Job summary

Peraton is seeking a ForgeRock Identity Gateway (IG)/PingGateway Engineer for a U.S. federal IAM program. You will design identity-aware reverse proxy solutions and enforce access policies at the network edge within a Zero Trust framework.

The role requires hands-on IG/PingGateway skills, OAuth/OIDC/SAML integrations, and experience with Kubernetes/Docker in federal environments. Security clearance is required.

Qualifications

• Experience with IAM and identity gateways in federal environments.
• Hands-on ForgeRock IG / PingGateway or similar API gateway reverse proxy.
• Familiarity with OAuth 2.0, OIDC, SAML, JWT and LDAP.
• Strong scripting in Groovy/JavaScript and REST API security.
• Understanding of Zero Trust (NIST SP 800-207) and FedRAMP standards.

Responsibilities

• Design, configure, and maintain PingGateway as an identity-aware reverse proxy.
• Develop gateway routes, policies, filters, and scripts for request/response transformation.
• Secure APIs and microservices using PingGateway capabilities and token validation.
• Implement SSO, MFA, and federated identity flows; manage OAuth/OIDC/SAML integrations.
• Operate gateway in Docker/Kubernetes; support CI/CD and infra-as-code practices.
• Provide L3 production support; perform root-cause analysis for identity/routing issues.

Skills

IAM

ForgeRock IG

PingGateway

OAuth 2.0

OIDC

SAML

Kubernetes

Docker

Scripting Groovy

Scripting JavaScript

REST APIs

Zero Trust

Security clearance

Education

Bachelor's degree or equivalent

9 years with HS diploma/equivalent

Tools

Kubernetes

Docker

CI/CD

Prometheus

OpenTelemetry

PingGateway

ForgeRock IG

AWS/Azure/GCP

Job description

Peraton is seeking a ForgeRock Identity Gateway (IG)/PingGateway Engineer for a U.S. federal IAM program. You will design identity-aware reverse proxy solutions and enforce access policies at the network edge within a Zero Trust framework.

The role requires hands-on IG/PingGateway skills, OAuth/OIDC/SAML integrations, and experience with Kubernetes/Docker in federal environments. Security clearance is required.