Senior IAM Solutions Engineer

Harvard Partners, LLP, Trusted Advisors to IT; Boston (MA); On-site; USD 120,000 - 150,000; Full time

Job summary

Harvard Partners, LLP, Trusted Advisors to IT is seeking a seasoned Senior IAM Solutions Engineer to design and automate identity solutions. In this role, you will bridge legacy systems and modern identity solutions using ForgeRock and Ping Identity. Responsibilities include deploying IAM solutions in cloud environments, developing authentication systems, and driving automation initiatives. The position requires a degree in a relevant field and a decade of IAM engineering experience, preferably with certifications in ForgeRock or Ping Identity.

Qualifications

• 10 years of experience in IAM engineering with a focus on security patterns.
• ForgeRock or Ping Identity certifications are highly desirable.
• Cloud certifications are also beneficial.

Responsibilities

• Design and implement IAM solutions using Ping Identity and ForgeRock products.
• Deploy and manage components in cloud platforms, preferably Azure.
• Develop custom authentication trees, SSO, MFA, and federation.
• Drive 'Identity-as-Code' initiatives for automated deployments.
• Monitor system health, perform upgrades, and resolve integration issues.

Skills

IAM Solutions design and implementation

Cloud integration (AWS, Azure, Google Cloud)

Authentication and Authorization with SAML, OAuth 2.0, OIDC

Automation with Terraform and Ansible

Scripting in Java, JavaScript, Python, or Groovy

Managing LDAP and Active Directory

Containerization with OpenShift or Kubernetes

Education

Degree in Computer Science, Software Engineering, or related field

Tools

ForgeRock (AM, IDM, DS, IG)

Ping Identity Stack

Terraform

Ansible

OpenShift

Job description

We are seeking a seasoned Senior IAM Solutions Engineer to design, implement, and automate our identity platform. You will be responsible for bridging the gap between legacy on‑premises systems and modern cloud‑native identity solutions using the ForgeRock and Ping Identity stacks.

Core Responsibilities

• Design & Implementation: create IAM solutions using Ping Identity and ForgeRock products, including ForgeRock AM, IDM, DS, IG and Ping Advanced One cloud (PA1C).
• Cloud Integration: Deploy and manage components in cloud platforms like AWS, Azure, or Google Cloud – Azure is preferred.
• Authentication & Authorization: develop custom authentication trees, SSO, MFA, and federation using protocols such as SAML, OAuth 2.0, and OIDC.
• Automation & DevOps: drive "Identity-as-Code" initiatives by utilizing Terraform, Ansible, and CI/CD pipelines (Jenkins, Git, UrbanCode) for automated deployments on OpenShift.
• Maintenance & Troubleshooting: monitor system health, perform upgrades, and resolve integration issues with web apps, APIs, and SaaS services.

Technical Skills Required

• Platform Expertise: deep knowledge of ForgeRock (AM, IDM, DS, IG) and Ping Advanced One Cloud.
• Scripting & Development: proficiency in Java, JavaScript, Python, or Groovy for custom workflows and API development.
• Directory Services: experience managing LDAP and Active Directory.
• Infrastructure as Code (IaC): hands‑on experience with Terraform or Ansible.
• Containerization: experience deploying IAM solutions within OpenShift or Kubernetes environments.

Qualifications

• Experience: 10 years in IAM engineering with a focus on security patterns.
• Education: degree in Computer Science, Software Engineering, or a related field.
• Certifications: ForgeRock or Ping Identity certifications are highly desirable, alongside cloud certifications.