Senior Identity & Access Management; IAM) Consultant; m​/f​/d ForgeRock​/Ping Identity

Senior Identity & Access Management (IAM) Consultant (m/f/d) – Forge Rock/Ping Identity

Join our team as a
Senior Identity & Access Management (IAM) Consultant (m/f/d) – Forge Rock/Ping Identity
–either
on-site at our locations in Madrid or Barcelona
or
flexibly remote from within Spain.

• Architect Modern Authentication: Design and implement robust authentication architectures for web, mobile, and native applications, ensuring seamless user journeys across distributed systems.
• Master Identity Standards: Architect and govern complex OAuth 2.0 and OpenID Connect (OIDC) flows, including the implementation of PKCE, secure token life cycles, and rotation strategies.
• Drive Passwordless Innovation: Lead the strategy and design for Passkeys (Web Authn) and passwordless authentication to eliminate credential-based risks.
• Platform Orchestration: Serve as the subject matter expert for the Ping Identity suite (formerly Forge Rock), including PingAM, PingIDM, and PingDS
  , to build scalable identity solutions.
• Cloud & Microservices Integration: Integrate identity services into cloud-native environments (AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices.

• Ping Identity/Forge Rock Ecosystem: Hands-on experience configuring and deploying PingAM, PingIDM, and PingDS (formerly Forge Rock) in enterprise environments.
• IAM Background: Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs.
• Deep Protocol Knowledge: In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments.
• Passkey Proficiency: Hands-on experience implementing Passkeys/Web Authn and a clear understanding of the underlying security mechanics.
• Security & Infrastructure: Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines.
• Bonus Points:
• Familiarity with European identity standards (
  eIDAS 2.0, LoA, and electronic signatures like AdES/QES).
• Experience with PSD2/SCA compliance
  , orchestrated MFA, and continuous authentication.
• Expertise in managing complex B2C/B2B identity life cycles and device-binding strategies

• Home
  Office
• 30 Days
  Vacation
• Additional
  Health
  Insurance
• Personal
  Coach
• 10 Days of Training
  per Year
• Employee
  Discounts
• Restaurant
  Ticket
• Company &
  Team Events

Employee benefits are voluntary and may vary depending on location, work hours or other factors. They are not intended as a guarantee or commitment and may be changed or discontinued at any time.

Check out the available locations for this position. You can select your preferred location in the application form .

iC Consult - Remote

iC Consult - Madrid
Spain

More locations

Spain

Diversity in all dimensions is very important to our teams. We therefore include this criterion in our hiring decisions.