Forgerock Consultant

Purpose:

• The purpose of this role is to provide foundational support in implementing, configuring, and maintaining PingFederate-based Single Sign-On (SSO) and federation services within the organization.
• The position ensures that users, applications, and partners can securely and seamlessly access resources using modern authentication protocols.
• Associate will work closely with senior IAM engineers to support integrations, troubleshoot incidents, and contribute to the overall stability and security of the enterprise identity and access management (IAM) ecosystem.

Main Priorities:

• Support SSO & Federation Integrations – Assist in configuring and maintaining SAML, OAuth, and OIDC connections for enterprise and SaaS applications.
• Day-to-Day Operations – Monitor, troubleshoot, and resolve issues related to PingFederate authentication and federation services.
• Certificate & Security Management – Help manage SSL/TLS certificates and ensure secure connections for SSO integrations.
• Collaboration & Support – Work with senior IAM engineers on deployments, incident resolution, and ongoing service improvements.
• Documentation & Compliance – Maintain accurate documentation of configurations, policies, and processes to support audits and best practices.
• Learning & Development – Build expertise in PingFederate and related IAM technologies to grow into more advanced roles.

Key Outputs:

• Configured SSO Connections – Successfully established SAML, OAuth, or OIDC integrations with enterprise and SaaS applications.
• Operational Stability – PingFederate services monitored and running with minimal downtime or authentication failures.
• Issue Resolution Logs – Documented troubleshooting and resolution of federation-related incidents and service requests.
• Certificate Updates – Timely renewal and installation of SSL/TLS certificates for PingFederate adapters and connections.
• Documentation Repository – Up-to-date configuration guides, runbooks, and process documentation to support audits and knowledge sharing.
• Compliance Support – Reports or evidence demonstrating adherence to IAM security, access control, and audit requirements.
• Knowledge Growth – Demonstrated learning through successful execution of assigned tasks, shadowing senior engineers, and contributing to project activities

Key Performance Metrics:

Qualifications:

Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field

Skills/ Knowledge:

• IAM Fundamentals – Understanding of authentication, authorization, SSO, and federation concepts.
• Federation Protocols – Working knowledge of SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Web Technologies – Familiarity with HTTP/HTTPS, REST APIs, JSON, and XML.
• PingFederate Basics – Exposure to PingFederate administration, adapters, and connections.
• SSL/TLS & Certificates – Understanding of certificate chain management (import, renewal, validation).
• Scripting/Programming (basic) – Knowledge of Java, .NET, PowerShell, or Python for troubleshooting or automation (preferred, not mandatory).
• System Troubleshooting – Ability to analyze logs, debug issues, and support integration failures..

Experience (add relevant Exp also)

• 0–2 years of experience in IAM, SSO, or related IT infrastructure roles.
• Internship or academic project exposure to Ping Identity or other federation tools (Okta, ADFS, SailPoint, etc.) is desirable.