Role Overview

This role designs, implements, and supports enterprise IAM and CIAM solutions using Ping Advanced Identity Cloud (AIC) and ForgeRock Access Management (AM). The engineer configures secure authentication and authorization, including SSO, MFA, adaptive policies, and federation, and builds customer-centric identity journeys. They integrate applications using OAuth 2.0, OpenID Connect, SAML, and REST APIs, and create JavaScript-based customizations for authentication trees and policy logic. The position collaborates with application, security, and infrastructure teams to onboard apps, support cloud (AWS) deployments, automate operations, and troubleshoot production issues. The role also contributes to CIAM strategy, governance, and compliance with up-to-date security standards.

Required Qualifications

- Ping Advanced Identity Cloud (AIC) Advanced, hands-on implementation and administration
- ForgeRock Access Management (AM) – Advanced, hands-on implementation and administration
- Strong experience implementing ForgeRock Identity Cloud / Ping AIC solutions
- Expertise in authentication journeys/orchestration, social login, and CIAM
- Access management, federation, SSO, MFA, adaptive authentication, and policy enforcement
- Deep knowledge of OAuth 2.0, OpenID Connect (OIDC), SAML, and identity federation concepts
- JavaScript – Advanced for custom nodes, authentication trees, policy logic, and API integrations
- AWS Cloud – Foundation level: core services, networking, security concepts, cloud-hosted IAM deployments
- Python – Intermediate for scripting, automation, integrations, and operational tooling (preferred)




- Agile delivery experience; collaboration with cross-functional teams
- Excellent troubleshooting, communication, and stakeholder management skills
- Security reviews/assessments, CIAM governance, and best practices
- Bachelor’s degree in Computer Science, Engineering, IT, Cyber Security, or related field
- 5+ years of experience in IAM/CIAM/Cyber Security consulting
- Certifications in ForgeRock, Ping Identity, or IAM technologies (nice-to-have)
- Experience migrating applications from legacy IAM platforms to ForgeRock/Ping (nice-to-have)
- Knowledge of API security, Zero Trust, and modern identity architectures (nice-to-have)
- Exposure to DevSecOps practices and cloud-native security controls (nice-to-have)

Responsibilities

- Design, implement, and support IAM/CIAM solutions using Ping AIC and ForgeRock AM
- Configure and manage authentication, authorization, SSO, MFA, adaptive authentication, and federation
- Develop and customize authentication journeys, access policies, and identity workflows
- Integrate applications with identity platforms via OAuth 2.0, OIDC, SAML, and REST APIs
- Create and maintain JavaScript-based scripts and customizations for ForgeRock trees and journeys
- Partner with application, security, and infrastructure teams to onboard applications to IAM platforms
- Participate in solution design, architecture reviews, and security assessments
- Support cloud-based identity deployments (e.g., AWS) and troubleshoot production auth/access issues
- Automate identity management processes and operational tasks using scripting and cloud-native tooling
- Contribute to CIAM strategy, governance, standards, and compliance best practices

📌 ForgeRock Identity & Access Management (Ping AIC) (Bengaluru)
🏢 Mobilution It Systems
📍 Bengaluru