Job Description – Ping Identity Consultant

Position Title: Ping Identity Consultant
Location: Saudi Arabia (KSA)
Work Mode: Onsite / Hybrid
Employment Type: Full-Time
Experience Required: 7–10+ Years

Position Summary

We are seeking a highly skilled Ping Identity Consultant to design, implement, and support enterprise Identity and Access Management (IAM) solutions across complex enterprise and hybrid environments. The ideal candidate will have extensive experience in IAM technologies, authentication and federation protocols, API security, identity governance, and modern access management frameworks. This role requires strong technical expertise, stakeholder engagement, and the ability to lead IAM initiatives from architecture through production support.

Key Responsibilities

• Design, implement, and maintain enterprise IAM solutions across enterprise and hybrid environments.
• Deliver end-to-end IAM projects covering SSO, MFA, Federation, and API Security.
• Configure, customize, troubleshoot, patch, and upgrade IAM platforms.
• Design authentication flows, access policies, user journeys, and authorization frameworks.
• Implement RBAC, ABAC, risk-based access controls, and Zero Trust security models.
• Develop custom integrations, extensions, and automation solutions.
• Configure and maintain identity repositories, directory services, and synchronization mechanisms.
• Integrate IAM solutions with enterprise applications, cloud services, APIs, and third-party platforms.
• Perform performance tuning, monitoring, capacity planning, disaster recovery planning, and production support.
• Support governance, compliance, audit requirements, and access review processes.
• Create architecture documents, operational runbooks, deployment guides, and technical documentation.
• Lead technical workstreams, mentor junior team members, and collaborate with business and technology stakeholders.

Must-Have Skills

• 7–10+ years total IAM experience with 4–6+ years hands-on across ForgeRock AM and exposure to IDM, IG, and DS/OpenDJ in production.
• Proven delivery of SSO, MFA, Federation, and API Protection solutions.
• Strong expertise in SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Hands-on experience with ForgeRock AM installation, configuration, customization, patching, and upgrades.
• Strong understanding of realms, authentication trees, nodes, sessions, and access policies.
• Experience implementing RBAC, ABAC, risk-based access controls, and Zero Trust architectures.
• Strong Java development skills with Python, Bash, and Groovy scripting experience.
• Experience developing custom nodes, extensions, integrations, and automation solutions.
• Experience with Git workflows, CI/CD pipelines, and DevOps practices.
• Expertise in DS/OpenDJ including identity stores, replication, indexing, and schema management.
• Experience with federation and token management for B2E, B2C, and partner integrations.
• Experience integrating IAM platforms with enterprise applications, APIs, and third-party systems.
• Strong experience in high availability, disaster recovery, performance tuning, capacity planning, monitoring, and incident response.
• Experience integrating IAM solutions with SIEM and PAM platforms.
• Experience supporting governance, compliance, audit readiness, and access review processes.
• Experience with cloud, containerized, and hybrid deployments.
• Hands-on experience with ForgeRock IG, Java Agents, and Web Agents.
• Experience securing microservices and APIs.
• Strong stakeholder management, communication, leadership, and mentoring skills.
• Experience creating architecture documents, solution designs, runbooks, and technical documentation.
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field.

Preferred Skills

• Experience in Banking, Financial Services, Government, Telecom, or other highly regulated industries.
• ForgeRock Certifications.
• Experience with Docker, Kubernetes, or OpenShift.
• Knowledge of Identity Governance and Administration (IGA) solutions.
• Experience with Azure, AWS, or Google Cloud platforms.
• Exposure to DevSecOps and Infrastructure-as-Code (IaC) practices.
• Experience integrating with SIEM, PAM, and enterprise security monitoring solutions.
• CISSP, CISM, Azure Security, AWS Security, or equivalent certifications.  

Education & Certifications

• Bachelor’s Degree in Computer Science, Information Technology, Engineering, or a related discipline.
• ForgeRock Certifications preferred.
• Relevant IAM, Cybersecurity, or Cloud Security certifications are highly desirable.