Senior Consultant - ForgeRock Access Management

Role Overview

We are seeking a Consultant / Senior Consultant with strong expertise in Ping Advanced Identity Cloud (AIC) / ForgeRock Identity Cloud and ForgeRock Access Management (AM). The ideal candidate will play a key role in designing, implementing, and supporting modern Customer Identity and Access Management (CIAM) solutions, enabling secure authentication, authorization, and identity lifecycle management for enterprise applications.

Key Responsibilities

• Design, implement, and support enterprise IAM and CIAM solutions using Ping Advanced Identity Cloud (AIC) and ForgeRock Access Management (AM).
  
• Configure and manage authentication, authorization, Single Sign-On (SSO), Multi-Factor Authentication (MFA), adaptive authentication, and federation protocols.
  
• Develop and customize authentication journeys, access policies, and identity workflows within ForgeRock/Ping environments.
  
• Integrate applications with identity platforms using standards such as OAuth 2.0, OpenID Connect (OIDC), SAML, and REST APIs.
  
• Develop and maintain JavaScript-based scripts and customizations within ForgeRock authentication trees and journeys.
  
• Work closely with application, security, and infrastructure teams to onboard applications into the IAM ecosystem.
  
• Participate in solution design, architecture reviews, and security assessments.
  
• Support cloud-based identity deployments and troubleshoot production issues related to authentication and access management.
  
• Automate identity management processes and operational tasks using scripting and cloud-native approaches.
  
• Contribute to CIAM strategy, governance, and best practices while ensuring compliance with security standards.
  

Mandatory Skills

Ping Advanced Identity Cloud (AIC) – Advanced

• Strong experience in implementing and administering ForgeRock Identity Cloud / Ping AIC solutions.
  
• Expertise in authentication journeys, identity orchestration, social login integration, and customer identity management.
  

ForgeRock Access Management (AM) – Advanced

• Hands-on experience with access management, federation, SSO, MFA, adaptive authentication, and policy enforcement.
  
• Deep knowledge of OAuth 2.0, OIDC, SAML, and identity federation concepts.
  

JavaScript – Advanced

• Strong scripting experience for custom authentication trees, journey nodes, policy logic, and API integrations.
  

AWS Cloud Engineering – Foundation

• Familiarity with AWS services, cloud networking, security concepts, and cloud-hosted IAM deployments.
  

[hr align="center" size="0" width="100%"]

Preferred Skills

Customer Identity and Access Management (CIAM) – Advanced

• Experience designing customer-centric identity solutions with a focus on security, scalability, and user experience.
  

Java – Intermediate

• Experience with Java SpringBoot, REST API development.
  

[hr align="center" size="0" width="100%"]

Key Skills

• ForgeRock Access Management (AM)
  
• Ping Advanced Identity Cloud (AIC)
  
• Customer Identity & Access Management (CIAM)
  
• OAuth 2.0 / OpenID Connect
  
• SAML Federation
  
• Single Sign-On (SSO)
  
• Multifactor Authentication (MFA)
  
• Identity Governance
  
• JavaScript Development
  
• AWS Cloud
  

[hr align="center" size="0" width="100%"]

Qualifications

• Bachelors degree in Computer Science, Engineering, Information Technology, Cyber Security, or related field.
  
• 5+ years of experience in Identity and Access Management (IAM), Customer Identity (CIAM), or Cyber Security consulting.
  
• Strong understanding of authentication, authorization, federation, and identity security principles.
  
• Experience working in agile delivery environments and collaborating with cross-functional teams.
  
• Excellent troubleshooting, communication, and stakeholder management skills.
  

[hr align="center" size="0" width="100%"]

Nice-to-Have

• Certifications in ForgeRock, Ping Identity, or IAM technologies.
  
• Experience migrating applications from legacy IAM platforms to ForgeRock/Ping solutions.
  
• Knowledge of API security, Zero Trust principles, and modern identity architecture.
  
• Exposure to DevSecOps practices and cloud-native security controls.
  

Ideal Candidate Profile

A successful candidate will combine deep ForgeRock/Ping AIC expertise with strong CIAM knowledge, enabling organizations to deliver secure, seamless, and scalable digital identity experiences while adhering to modern security and compliance requirements.