Identity Gateway Engineer - Zero Trust IAM Architect

Peraton; Reston (VA); On-site; USD 80,000 - 128,000; Full time

Job summary

ForgeRock IG/PingGateway Engineer role supporting a U.S. Department of Education IAM program. You will design and operate identity-aware reverse proxies and gateway solutions within a Zero Trust architecture and align with NIST, FedRAMP, and FISMA standards.

Responsibilities include configuring PingGateway, securing APIs, implementing OAuth 2.0, OpenID Connect, SAML, and MFA, and integrating with ForgeRock components in cloud, on-prem, and hybrid environments. U.S. citizenship required.

Qualifications

• 5+ years in Identity and Access Management (IAM)
• Bachelor's degree required or 9 years experience with HS diploma/equivalent
• Hands-on with ForgeRock IG / PingGateway or similar gateway solutions
• Experience in federal environments and Agile/Scrum teams
• Familiarity with OAuth 2.0, OpenID Connect, SAML 2.0, JWT, LDAP
• Scripting in Groovy/JavaScript
• Cloud/hybrid environments and CI/CD pipelines
• U.S. Citizenship and ability to obtain clearance

Responsibilities

• Design, configure, and maintain PingGateway (ForgeRock IG) as identity-aware reverse proxy
• Manage TLS termination, routing, and load balancer integrations
• Enforce identity and access policies at the network edge
• Develop JSON route configurations and gateway policies
• Implement filters/handlers/scripts for request/response transformation
• Support credential replay, token injections, header manipulation for legacy apps
• Secure APIs using PingGateway microgateway capabilities
• Implement OAuth 2.0, OpenID Connect, SAML integrations
• SSO, MFA, and federated identity flows
• Zero Trust gateway-based enforcement and adaptive authentication
• Develop Groovy and JavaScript scripts for gateway behavior
• Configure logging, metrics, and audit trails; integrate with SIEM/OpenTelemetry
• Deploy PingGateway in Docker/Kubernetes; support CI/CD pipelines
• Integrate PingGateway with ForgeRock components (AM, IDM, DS)
• Provide L3 support and root-cause analysis
• Ensure compliance with FISMA, FedRAMP, NIST guidelines

Skills

IAM

Agile/Scrum

REST APIs

OAuth 2.0

OpenID Connect

SAML 2.0

JWT

Zero Trust

Kubernetes

Docker

Groovy/JavaScript scripting

U.S. Citizenship

Education

Bachelor's degree

High School diploma or equivalent

Tools

ForgeRock IG / PingGateway

Kubernetes

Docker

CI/CD pipelines

Prometheus

OpenTelemetry

Job description

ForgeRock IG/PingGateway Engineer role supporting a U.S. Department of Education IAM program. You will design and operate identity-aware reverse proxies and gateway solutions within a Zero Trust architecture and align with NIST, FedRAMP, and FISMA standards.

Responsibilities include configuring PingGateway, securing APIs, implementing OAuth 2.0, OpenID Connect, SAML, and MFA, and integrating with ForgeRock components in cloud, on-prem, and hybrid environments. U.S. citizenship required.