> Markdown version of [/jobs/ext/2091734-senior-iam-consultant-forgerock-ping-identity](https://www.wearedevelopers.com/jobs/ext/2091734-senior-iam-consultant-forgerock-ping-identity). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# (Senior) Iam Consultant - Forgerock / Ping Identity

- **Company:** iC Consult
- **Location:** Vitoria-Gasteiz, Spain
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Amazon Web Services, User Authentication, Microsoft Azure, Cloud Computing, Cloud Computing Security, System Configuration, Continuous Integration, Distributed Systems, Electronic Signatures, Identity and Access Management, OAuth, OpenID, Ping (Networking Utility), Openid Connect, Kubernetes, Microservices
- **Published:** August 16, 2026
- **Apply:** https://www.buscojobs.com.es/senior-iam-consultant-forgerock-ping-identity-m-f-d-en-vitoria-ID-367560345

## About the Role

IAM Background: Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs.
Deep Protocol Knowledge: In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments.
Passkey Proficiency: Hands-on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics.
Security & Infrastructure: Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines.
Bonus Points: Familiarity with European identity standards ( eIDAS 2.0 , LoA, and electronic signatures like AdES/QES).
Experience with PSD2/SCA compliance , orchestrated MFA, and continuous authentication.
Expertise in managing complex B2C/B2B identity lifecycles and device-binding strategies What we offer: 30 days of vacation (plus public holidays) as well as a flextime model and the option to work from your home office, promoting your life balance High-quality equipment of your choice including company mobile phone - whether Apple or Windows, you decide which top equipment you prefer to work with iC Consult University - our comprehensive onboarding program accompanies you on your individual induction path with training modules, mentoring programs and events and a 3-day onsite bootcamp for your new start with us, in which you will be trained around representing iC Consult and IAM Through our iC Consult Academy you have access to internal and external trainings tailored to your needs - 10 days a year are dedicated to your personal and professional development Further Benefit like a personal coach, language training platforms, food vouchers, health insurance and employee

## Description

Leverage your Career within the greatest Identity Security Community We champion #IAMExcellence Join our team as a (Senior) IAM Consultant - ForgeRock / Ping Identity (m/f/d) - either on-site/hybrid at our locations in Barcelona or Madrid, or flexibly remote from within Spain.iC Consult is a global Identity Security consultancy and a true People Business: a close-knit community of Identity Security enthusiasts who combine agility, direct impact, and strong leadership with global delivery excellence - jointly optimizing people desirability, technology feasibility, and sustainable business viability.Within this environment, you will work in a local team setup that is part of our multimatrix organization - meaning your local team, your project team, and your reporting line may differ, giving you broad exposure, flexibility, and diverse collaboration opportunities.Your Responsibilities: Architect Modern Authentication: Design and implement robust authentication architectures for web, mobile, and native applications, ensuring seamless user journeys across distributed systems.Master Identity Standards: Architect and govern complex OAuth 2.0 and OpenID Connect (OIDC) flows, including the implementation of PKCE, secure token lifecycles, and rotation strategies.Drive Passwordless Innovation: Lead the strategy and design for Passkeys (WebAuthn) and passwordless authentication to eliminate credential-based risks.Platform Orchestration: Serve as the subject matter expert for the Ping Identity suite (formerly ForgeRock) , including PingAM, PingIDM, and PingDS , to build scalable identity solutions.Cloud & Microservices Integration: Integrate identity services into cloud-native environments (AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices.Your Experience: PingIdentity/ForgeRock Ecosystem: Hands-on experience configuring and deploying PingAM, PingIDM, and PingDS (formerly ForgeRock) in enterprise environments.IAM Background: Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs.Deep Protocol Knowledge: In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments.Passkey Proficiency: Hands-on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics.Security & Infrastructure: Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines.Bonus Points: Familiarity with European identity standards ( eIDAS 2.0 , LoA, and electronic signatures like AdES/QES).Experience with PSD2/SCA compliance , orchestrated MFA, and continuous authentication.Expertise in managing complex B2C/B2B identity lifecycles and device-binding strategies What we offer: 30 days of vacation (plus public holidays) as well as a flextime model and the option to work from your home office, promoting your life balance High-quality equipment of your choice including company mobile phone - whether Apple or Windows, you decide which top equipment you prefer to work with iC Consult University - our comprehensive onboarding program accompanies you on your individual induction path with training modules, mentoring programs and events and a 3-day onsite bootcamp for your new start with us, in which you will be trained around representing iC Consult and IAM Through our iC Consult Academy you have access to internal and external trainings tailored to your needs - 10 days a year are dedicated to your personal and professional development Further Benefit like a personal coach, language training platforms, food vouchers, health insurance and employee discounts on products and services from well-known suppliers Regular team and company events in a relaxed atmosphere to strengthen the corporate climate A workplace with flat hierarchies, short decision-making paths, and a high degree of personal responsibility, providing substantial decision-making freedom Central Office: iC Consult Spain S.L. Gran Via de Carles III, 94, planta 8 puerta 3, ***** Barcelona Spain Apply now and become part of our team!If you have any questions, we're always here for you and look forward to getting in touch.Please send us your application documents (CV, certificates, salary expectations, and possible start date) via LinkedIn Easy Apply .matters to us.We welcome applications regardless of gender, age, origin, religion or belief, disability, sexual identity, or any other characteristic protected by law.All hiring decisions are based solely on qualifications and suitability.For more information, visit: The protection of your data is important to us.You can find all information on how we handle your data in our .


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Navigating the Corporate Jungle: Life as a Developer in a large Company](https://www.wearedevelopers.com/videos/621-navigating-the-corporate-jungle-life-as-a-developer-in-a-large-company)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)

## Related Articles

- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Top-Paying Tech Jobs (with Salaries)](https://www.wearedevelopers.com/magazine/372-top-paying-tech-jobs-with-salaries)
- [Dev Digest 131 - AI'm not sure about OSS](https://www.wearedevelopers.com/magazine/472-dev-digest-131-ai-m-not-sure-about-oss)