Senior Identity Engineer - Forgerick/Ping

Job Title: Senior Identity Engineer — Ping/ForgeRock (IAM)
Location: Melbourne

Job description:

About the Role

We are looking for an experienced Identity Engineer to design, build, and operate our Customer/Workforce Identity and Access Management platform built on Ping Identity / ForgeRock. You will work across authentication, authorization, federation, and directory services, integrating IAM capabilities into a broader ecosystem of services written primarily in Go and/or Java. This role suits someone who enjoys deep protocol-level work (OAuth2, OIDC, SAML) as well as hands-on backend engineering.

What You'll Do

• Design, implement, and maintain identity solutions using Ping Identity (PingFederate, PingAccess, PingDirectory, PingOne) and/or ForgeRock (AM, IDM, DS, IG) products.

• Build and maintain authentication and authorization flows: OAuth 2.0, OpenID Connect, SAML 2.0, MFA, and passwordless/adaptive authentication.

• Develop custom plugins, nodes/authentication trees, policy scripts, and extensions in Java or Groovy (ForgeRock) or via SDKs/APIs (Ping).

• Build and integrate backend services and APIs in Go or Java that consume or extend IAM platform capabilities (token issuance, session management, user provisioning, etc.).

• Configure and manage federation with external Identity Providers/Service Providers (B2B, B2C, partner integrations).

• Own directory services architecture (LDAP/DS) including schema design, replication, and performance tuning.

• Automate deployment and configuration using Infrastructure-as-Code (Terraform, Ansible) and CI/CD pipelines.

• Troubleshoot production identity issues, perform root cause analysis, and drive resolution with minimal downtime.

• Ensure solutions meet security, compliance, and audit requirements (OWASP, NIST, ISO 27001, PCI-DSS, or relevant regulatory standards).

• Collaborate with security, platform, and application teams to define IAM standards and best practices.

• Participate in on-call rotation for critical identity infrastructure.

Must-Have Qualifications

• 4+ years of hands-on experience with Ping Identity (PingFederate/PingAccess/PingOne) and/or ForgeRock (AM/IDM/DS/IG) platforms.

• Solid understanding of identity protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, WS-Fed.

• Working proficiency in Go or Java for building backend services, custom authentication nodes, or API integrations.

• Experience with LDAP directory services (design, tuning, replication).

• Familiarity with containerized/cloud environments (Docker, Kubernetes) and cloud platforms (AWS/Azure/GCP).

• Experience with CI/CD tooling and Infrastructure-as-Code (Terraform, Jenkins, GitLab CI, etc.).

• Strong understanding of security fundamentals: TLS, encryption at rest/in transit, secrets management, least-privilege access.

• Excellent troubleshooting skills across distributed systems and network layers (HTTP, TCP/IP, DNS).

Nice-to-Have

• ForgeRock or Ping certifications (e.g., ForgeRock Certified Access Management/Directory Services Specialist, Ping Certified Professional).

• Experience with adaptive/risk-based authentication and fraud detection integrations.

• Exposure to financial services or other highly regulated environments.

• Experience with API gateways (Apigee, Kong, PingAccess as gateway) and microservices architecture.

• Familiarity with policy-as-code and zero-trust architecture principles.

• Scripting experience in Groovy, Python, or Bash for automation.

About Us:

We are Delivery Centric, a dynamic technology company that is transforming the delivery of cloud implementations and cybersecurity. We are headquartered in Australia with a global presence. We are tenacious, future-thinking, and highly driven to achieve an ambitious vision to be the leading global provider of innovative technologies for companies that keep our world clean, safe, and secure.

Our fast-paced and supportive environment will offer you lots of benefits, including a competitive salary, a friendly team, a healthy work environment, and opportunities for training and development.

Please contact us at [email protected] for additional details

Job Type: Full-time

Work Authorisation:

• Australia (Preferred)

Work Location: Hybrid remote in Melbourne VIC