> Markdown version of [/jobs/ext/1999385-senior-identity-access-management-iam-consultant-forgerock-ping-identity](https://www.wearedevelopers.com/jobs/ext/1999385-senior-identity-access-management-iam-consultant-forgerock-ping-identity). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Identity & Access Management (Iam) Consultant - Forgerock/Ping Identity - **Company:** iC Consult - **Location:** Barcelona, Spain - **Contract:** Permanent contract - **Skills:** Amazon Web Services, User Authentication, Microsoft Azure, Cloud Computing, Cloud Computing Security, Distributed Systems, Electronic Signatures, Identity and Access Management, OAuth, OpenID, Ping (Networking Utility), Kubernetes, Microservices - **Published:** August 9, 2026 - **Apply:** https://www.buscojobs.com.es/senior-identity-access-management-iam-consultant-m-f-d-forgerock-ping-identity-en-barcelona-ID-366257610 ## About the Role li libIAM Background: /b Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs. /li libDeep Protocol Knowledge: /b In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments. /li libPasskey Proficiency: /b Hands-on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics. /li libSecurity Infrastructure: /b Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines. /li libBonus Points: /b /li liFamiliarity with European identity standards (beIDAS 2.0 /b, LoA, and electronic signatures like AdES/QES). /li liExperience with bPSD2/SCA compliance /b, orchestrated MFA, and continuous authentication. /li liExpertise in managing complex B2C/B2B identity lifecycles and device-binding strategies /li /ul h3What We Offer - Enjoy a Range of Benefits /h3 ul liHomebr/Office /li li30 Daysbr/Vacation /li liAdditionalbr/Healthbr/Insurance /li liPersonalbr/Coach /li li10 Days of Trainingbr/per Year /li liEmployeebr/Discounts /li liRestaurantbr/Ticket /li liCompany br/Team Events /li /ul pEmployee benefits are voluntary and may vary depending on location, work hours or other factors. They are not intended as a guarantee or commitment and may be changed or discontinued at any time. ## Description ph3Senior Identity Access Management (IAM) Consultant (m/f/d) - ForgeRock/Ping Identity /h3 pJoin our team as abSenior Identity Access Management (IAM) Consultant (m/f/d) - ForgeRock/Ping Identity /b-eitherbon-site at our locations in Madrid or Barcelona /borbflexibly remote from within Spain./b /p h3Your Responsibilities: /h3 ul libArchitect Modern Authentication: /b Design and implement robust authentication architectures for web, mobile, and native applications, ensuring seamless user journeys across distributed systems./li libMaster Identity Standards: /b Architect and govern complex bOAuth 2.0 /band bOpenID Connect (OIDC) /b flows, including the implementation of PKCE, secure token lifecycles, and rotation strategies./li libDrive Passwordless Innovation: /b Lead the strategy and design for bPasskeys (WebAuthn) /b and passwordless authentication to eliminate credential-based risks./li libPlatform Orchestration: /b Serve as the subject matter expert for the bPing Identity suite (formerly ForgeRock) /b, including bPingAM, PingIDM, and PingDS /b, to build scalable identity solutions./li libCloud Microservices Integration: /b Integrate identity services into cloud-native environments (AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices./li /ul h3Your Experience: /h3 ul libPingIdentity/ForgeRock Ecosystem: /b Hands-on experience configuring and deploying bPingAM, PingIDM, and PingDS (formerly ForgeRock) /bin enterprise environments./li libIAM Background: /b Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs./li libDeep Protocol Knowledge: /b In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments./li libPasskey Proficiency: /b Hands-on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics./li libSecurity Infrastructure: /b Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines./li libBonus Points: /b /li liFamiliarity with European identity standards (beIDAS 2.0 /b, LoA, and electronic signatures like AdES/QES)./li liExperience with bPSD2/SCA compliance /b, orchestrated MFA, and continuous authentication./li liExpertise in managing complex B2C/B2B identity lifecycles and device-binding strategies /li /ul h3What We Offer - Enjoy a Range of Benefits /h3 ul liHomebr/Office /li li30 Daysbr/Vacation /li liAdditionalbr/Healthbr/Insurance /li liPersonalbr/Coach /li li10 Days of Trainingbr/per Year /li liEmployeebr/Discounts /li liRestaurantbr/Ticket /li liCompany br/Team Events /li /ul pEmployee benefits are voluntary and may vary depending on location, work hours or other factors.They are not intended as a guarantee or commitment and may be changed or discontinued at any time./p h3Possible Locations for this Vacancy /h3 pCheck out the available locations for this position.You can select your preferred location in the application form ./p pbiC Consult - Remote /bbr/ /p pbiC Consult - Madrid /bbr/Spainbr/ /p pMore locations /p pbSpain /bbr/ /p pDiversity in all dimensions is very important to our teams.We therefore include this criterion in our hiring decisions./p /p #J-*****-Ljbffr ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [No More Post-its: Boost your login security with APIs](https://www.wearedevelopers.com/videos/1043-no-more-post-its-boost-your-login-security-with-apis) - [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way) - [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak) - [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications) - [Instant KAI Sandboxes with vCluster: Multi-Tenant, Multi-Scheduler GPU Sharing](https://www.wearedevelopers.com/videos/100333-instant-kai-sandboxes-with-vcluster-multi-tenant-multi-scheduler-gpu-sharing) ## Related Articles - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers) - [WeAreDevelopers Dev Digest Issue 116 - The new search wars…](https://www.wearedevelopers.com/magazine/445-wearedevelopers-dev-digest-issue-116-the-new-search-wars) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Dev Digest 119 - ❤️ === ❤️](https://www.wearedevelopers.com/magazine/454-dev-digest-119)