- Jobseeker Video Testimonials
- Employee Glassdoor Reviews
We are an IT Solutions Integrator/Consulting Firm helping our clients hire the right professional for an exciting long-term project. Here are a few details.
Location:Hyderabad | Bengaluru | Pune | Chennai |Mumbai | Kolkatta | Gurgram
Notice Period: 0-30 days
Requirements
We are seeking an experienced IAM / CIAM Architect with deep expertise in designing, implementing, and modernizing enterprise Identity and Access Management (IAM) and Customer Identity & Access Management (CIAM) solutions. The ideal candidate will have extensive hands-on experience with ForgeRock Identity Platform and PingOne Advanced Identity Cloud (AIC), enabling secure, scalable, and seamless authentication experiences across web, mobile, and API-driven applications.
This role requires a strong architecture background combined with hands-on implementation capabilities to design, build, integrate, and modernize customer identity solutions for enterprise-scale digital platforms.
- Architect and deliver enterprise-grade IAM/CIAM solutions for customer-facing digital platforms.
- Design and implement secure authentication and authorization using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), JWT, and modern identity protocols.
- Develop and integrate identity services across web applications, mobile applications, REST APIs, and microservices.
- Lead end-to-end implementation of ForgeRock Identity Platform, including:
- ForgeRock Access Management (AM)
- ForgeRock Identity Management (IDM)
- ForgeRock Identity Gateway (IG)
- ForgeRock Directory Services (DS)
- ForgeRock Access Management (AM)
- Drive identity modernization initiatives, including migration and implementation of PingOne Advanced Identity Cloud (AIC).
- Design secure authentication journeys, adaptive authentication, MFA, SSO, federation, passwordless authentication, and identity lifecycle management.
- Collaborate with Product, UX, Application Development, Security, Infrastructure, and DevOps teams to deliver secure digital identity experiences.
- Design and secure REST APIs using OAuth 2.0, JWT validation, token management, API gateways, and identity-based security controls.
- Review solution architecture, conduct technical design reviews, and provide best-practice recommendations.
- Mentor engineering teams on identity standards, authentication frameworks, and secure development practices.
- Participate in production support, troubleshooting, root cause analysis, and performance optimization of identity platforms.
- Collaborate with Cloud and DevOps teams for deployment automation and cloud-native identity implementations.
Identity & Access Management
- Customer Identity & Access Management (CIAM)
- Identity & Access Management (IAM)
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- Identity Federation
- Identity Lifecycle Management
- Authentication & Authorization
- Adaptive Authentication
- Passwordless Authentication
- SAML 2.0
- OAuth 2.0
- OpenID Connect (OIDC)
- JWT
- SCIM
- LDAP
- PKI
- X.509 Certificates
- ForgeRock Access Management (AM)
- ForgeRock Identity Management (IDM)
- ForgeRock Identity Gateway (IG)
- ForgeRock Directory Services (DS)
- Authentication Trees
- Journeys
- Custom Nodes
- Identity Synchronization
- PingOne Advanced Identity Cloud (AIC)
- PingOne Migration
- PingOne Authentication Flows
- PingOne Integration
- PingOne Federation
- REST APIs
- API Security
- CORS
- Cookies
- Browser Security
- Session Management
- Token Security
- Secure Authentication Patterns
- Microsoft Azure
- AKS (Azure Kubernetes Service)
- Kubernetes
- Docker
- CI/CD Pipelines
- Infrastructure as Code
- Java
- JavaScript
- Groovy
- JSON
- XML
- REST
- Bash/Shell Scripting
- 10+ years of experience in Identity & Access Management.
- Strong hands-on experience implementing ForgeRock Identity Platform.
- Experience designing enterprise-scale CIAM solutions.
- Proven experience implementing OAuth, OIDC, SAML, and JWT-based authentication.
- Experience integrating IAM with enterprise applications, APIs, and cloud services.
- Hands-on experience migrating or implementing PingOne Advanced Identity Cloud (AIC).
- Experience working in Agile delivery environments.
- Experience with Azure Cloud and Kubernetes (AKS).
- Knowledge of Zero Trust Security Architecture.
- Experience with API Gateways and Microservices.
- Familiarity with DevSecOps practices.
- Ping Identity or ForgeRock certifications are highly desirable.
Benefits
Skills Required
- 10+ years of experience in Identity & Access Management
- Strong hands-on experience implementing ForgeRock Identity Platform (AM, IDM, IG, DS)
- Hands-on experience migrating or implementing PingOne Advanced Identity Cloud (AIC)
- Experience designing enterprise-scale CIAM solutions
- Proven experience implementing OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and JWT-based authentication
- Experience with Identity Federation, SSO, MFA, adaptive authentication, passwordless authentication
- Experience with SCIM, LDAP, PKI and X.509 certificate management
- Designing and securing REST APIs, token management, and API security controls
- Experience integrating IAM with enterprise applications, APIs, and cloud services
- Experience working in Agile delivery environments
- Knowledge of Microsoft Azure, Kubernetes (AKS), Docker, CI/CD and Infrastructure as Code
- Programming skills: Java, JavaScript, Groovy, JSON, XML, REST, Bash/Shell scripting
- Familiarity with Zero Trust architecture, API Gateways, Microservices, and DevSecOps practices
- Ping Identity or ForgeRock certifications
What We Do
Alignity is a Talent Solutions company focused on revolutionizing talent acquisition, employer branding, and performance inspiration to help organizations achieve accelerated growth.








