Role: Senior Identity Engineer — Ping/ForgeRock (IAM)

Location: Melbourne

About the Role

We are looking for an experienced Identity Engineer to design, build, and operate

our Customer/Workforce Identity and Access Management platform built on Ping

Identity / ForgeRock. You will work across authentication, authorization, federation,

and directory services, integrating IAM capabilities into a broader ecosystem of

services written primarily in Go and/or Java. This role suits someone who enjoys

deep protocol-level work (OAuth2, OIDC, SAML) as well as hands-on backend

engineering.

What You'll Do

- Design, implement, and maintain identity solutions using Ping Identity

(PingFederate, PingAccess, PingDirectory, PingOne) and/or **ForgeRock (AM, IDM,

DS, IG) products.

- Build and maintain authentication and authorization flows: OAuth 2.0, OpenID

Connect, SAML 2.0, MFA, and passwordless/adaptive authentication.

- Develop custom plugins, nodes/authentication trees, policy scripts, and extensions

in Java or Groovy (ForgeRock) or via SDKs/APIs (Ping).

- Build and integrate backend services and APIs in Go or Java that consume or

extend IAM platform capabilities (token issuance, session management, user

provisioning, etc.).

- Configure and manage federation with external Identity Providers/Service Providers

(B2B, B2C, partner integrations).

- Own directory services architecture (LDAP/DS) including schema design,

replication, and performance tuning.

- Automate deployment and configuration using Infrastructure-as-Code (Terraform,

Ansible) and CI/CD pipelines.

- Troubleshoot production identity issues, perform root cause analysis, and drive

resolution with minimal downtime.

- Ensure solutions meet security, compliance,



and audit requirements (OWASP,

NIST, ISO 27001, PCI-DSS, or relevant regulatory standards).

- Collaborate with security, platform, and application teams to define IAM standards

and best practices.

- Participate in on-call rotation for critical identity infrastructure.

Must-Have Qualifications

- 4+ years of hands-on experience with Ping Identity

(PingFederate/PingAccess/PingOne) and/or ForgeRock (AM/IDM/DS/IG) platforms.

- Solid understanding of identity protocols: **OAuth 2.0, OIDC, SAML 2.0, SCIM,

WS-Fed**.

- Working proficiency in Go or Java for building backend services, custom

authentication nodes, or API integrations.

- Experience with LDAP directory services (design, tuning, replication).

- Familiarity with containerized/cloud environments (Docker, Kubernetes) and cloud

platforms (AWS/Azure/GCP).

- Experience with CI/CD tooling and Infrastructure-as-Code (Terraform, Jenkins,

GitLab CI, etc.).

- Solid understanding of security fundamentals: TLS, encryption at rest/in transit,

secrets management, least-privilege access.

- Excellent troubleshooting skills across distributed systems and network layers

(HTTP, TCP/IP, DNS).

## Nice-to-Have

- ForgeRock or Ping certifications (e.g., ForgeRock Certified Access

Management/Directory Services Specialist, Ping Certified Professional).

- Experience with adaptive/risk-based authentication and fraud detection

integrations.

- Exposure to financial services or other highly regulated environments.

- Experience with API gateways (Apigee, Kong, PingAccess as gateway) and

microservices architecture.

- Familiarity with policy-as-code and zero-trust architecture principles.

- Scripting experience in Groovy, Python, or Bash for automation.

📌 Senior Identity Engineer — Ping/ForgeRock (IAM) (Melbourne)
🏢 DWS
📍 Melbourne