IAM / CIAM Architect (PingOne AIC & ForgeRock)
HybridShaikpet, State of Telangāna, Republic of India
Shaikpet, State of Telangāna, Republic of IndiaHybridContractSmall
ContractSmall
Job Summary
Architect and deliver enterprise-grade IAM/CIAM solutions for customer-facing digital platforms, designing secure authentication journeys using SAML 2.0, OAuth 2.0, OpenID Connect, and JWT. Lead end-to-end implementation of ForgeRock Identity Platform components and drive modernization initiatives including PingOne Advanced Identity Cloud (AIC) migration. Collaborate with Product, UX, Application Development, Security, and DevOps teams to integrate identity services across web, mobile, and API-driven applications. Mentor engineering teams on identity standards and secure development practices while participating in production support, troubleshooting, and performance optimization. Review solution architecture and provide best-practice recommendations for enterprise-scale digital identity experiences.
Required Qualifications
- IAM / CIAM Architect
- 8+ Years experience
- Deep expertise in designing, implementing, and modernizing enterprise Identity and Access Management (IAM) and Customer Identity & Access Management (CIAM) solutions
- Extensive hands-on experience with ForgeRock Identity Platform
- Extensive hands-on experience with PingOne Advanced Identity Cloud (AIC)
- Strong architecture background
- Hands-on implementation capabilities
- Experience designing, build, integrate, and modernize customer identity solutions for enterprise-scale digital platforms
- Architect and deliver enterprise-grade IAM/CIAM solutions for customer-facing digital platforms
- Design and implement secure authentication and authorization using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), JWT, and modern identity protocols
- Develop and integrate identity services across web applications, mobile applications, REST APIs, and microservices
- Lead end-to-end implementation of ForgeRock Identity Platform
- Drive identity modernization initiatives, including migration and implementation of PingOne Advanced Identity Cloud (AIC)
- Design secure authentication journeys, adaptive authentication, MFA, SSO, federation, passwordless authentication, and identity lifecycle management
- Collaborate with Product, UX, Application Development, Security, Infrastructure, and DevOps teams to deliver secure digital identity experiences
- Design and secure REST APIs using OAuth 2.0, JWT validation, token management, API gateways, and identity-based security controls
- Review solution architecture, conduct technical design reviews, and provide best-practice recommendations
- Mentor engineering teams on identity standards, authentication frameworks, and secure development practices
- Participate in production support, troubleshooting, root cause analysis, and performance optimization of identity platforms
- Collaborate with Cloud and DevOps teams for deployment automation and cloud-native identity implementations
- Identity & Access Management (IAM)
- Customer Identity & Access Management (CIAM)
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Identity Federation
- Identity Lifecycle Management
- Authentication & Authorization
- Adaptive Authentication
- Passwordless Authentication
- SAML 2.0
- OAuth 2.0
- OpenID Connect (OIDC)
- JWT
- SCIM
- LDAP
- PKI
- X.509 Certificates
- ForgeRock Access Management (AM)
- ForgeRock Identity Management (IDM)
- ForgeRock Identity Gateway (IG)
- ForgeRock Directory Services (DS)
- Authentication Trees
- Journeys
- Custom Nodes
- Identity Synchronization
- Ping Identity
- PingOne Advanced Identity Cloud (AIC)
- PingOne Migration
- PingOne Authentication Flows
- PingOne Integration
- PingOne Federation
- REST APIs
- API Security
- CORS
- Cookies
- Browser Security
- Session Management
- Token Security
- Secure Authentication Patterns
- Microsoft Azure
- AKS (Azure Kubernetes Service)
- Kubernetes
- Docker
- CI/CD Pipelines
- Infrastructure as Code
- Java
- JavaScript
- Groovy
- JSON
- XML
- REST
- Bash/Shell Scripting
- 10+ years of experience in Identity & Access Management
- Strong hands-on experience implementing ForgeRock Identity Platform
- Experience designing enterprise-scale CIAM solutions
- Proven experience implementing OAuth, OIDC, SAML, and JWT-based authentication
- Experience integrating IAM with enterprise applications, APIs, and cloud services
- Hands-on experience migrating or implementing PingOne Advanced Identity Cloud (AIC)
- Experience working in Agile delivery environments
- Notice Period: 0-30 days
- Hybrid work mode
- Location: Hyderabad | Bengaluru | Pune | Chennai | Mumbai | Kolkata | Gurugram
- Type: Contract to Hire
Desired Qualifications
- Experience with Azure Cloud and Kubernetes (AKS)
- Knowledge of Zero Trust Security Architecture
- Experience with API Gateways and Microservices
- Familiarity with DevSecOps practices
- Ping Identity or ForgeRock certifications
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.