IAM Engineer with ForgeRock AIC / Ping Identity AIC.

Job title: IAM Engineer +ForgeRock AIC / Ping Identity AIC.

Work Location: Fort Mill, SC 29707 On-site
Minimum years of experience: 10+ years

Job Description:

Experience as an Identity and Access Management IAM Engineer specializing in designing, implementing, and managing IAM solutions using ForgeRock AIC / Ping Identity AIC.

Hands-on in configuring access policies, permissions, and identity lifecycle management processes.
Hands-on in scripting, journey development, and API integrations to enhance IAM functionality.

Strong knowledge in performance tuning, troubleshooting, and ensuring high availability and security of IAM infrastructure.

Implementation experience in ForgeRock AIC / Ping Identity AIC for a large enterprise, securing 50,000+ identities.

SRE / SLM initiatives such as service-level objectives (SLOs), error budgeting, and resilience testing across IAM platforms.
Development of API-driven IAM automation workflows, reducing manual effort and improving security posture.
Enhanced authentication security by integrating OAuth 2.0 and OpenID Connect (OIDC) into the IAM platform.
IAM configuration audit, adherence to NIST and SOC2 standards.
Implementation using ForgeRock SDKs.
Identity and access assessments to identify vulnerabilities and remediations within ForgeRock CIAM.
Managed and configured ForgeRock CIAM components, including ForgeRock Identity Platform, ForgeRock Directory Services, and ForgeRock CIAM Identity Gateway.
Solution design experience on SailPoint IIQ modules.
Security audits and assessments. Good understanding in Okta implementations
Develop and enforce IAM policies and procedures to enhance security posture and compliance.
Identity Governance and Architect (IGA) and Privileged Access Management (PAM) tools (Okta, SailPoint, PingOne Advanced Identity Cloud)
Led the design and implementation of CyberArk's Privileged Access Management (PAM) solutions to safeguard critical assets.
Designed and implemented Single Sign-On (SSO) solutions using SAML, enabling seamless access to multiple applications with a single set of credentials.
Integrated OAuth2 for secure API authorization, allowing third-party applications controlled access to internal resources.
Expertise in Installation, configuration, deployment, and maintenance of PingFederate, PingOne, and
PingOne Access. Experienced in installing and configuring SiteMinder policy servers, Web Agents, Web Agent
Secure Proxy servers, PingFederate, PingOne Access, ODSEE 11g server (LDAP), Option Packs, etc.