> Markdown version of [/jobs/ext/2728003-iam-solutions-engineer](https://www.wearedevelopers.com/jobs/ext/2728003-iam-solutions-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# IAM Solutions Engineer

- **Company:** Cornerstone Barricades
- **Location:** Boston, MA, United States
- **Experience:** Expert
- **Salary:** $162,240.0 - $180,960.0
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), JavaScript (Programming Language), Active Directory, Application Programming Interfaces (APIs), Amazon Web Services, Computing Platforms, Microsoft Azure, Software as a Service, Cloud Computing, Cloud Engineering, Continuous Integration, DevOps, Groovy, Identity and Access Management, Python (Programming Language), Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, OpenShift, Ping (Networking Utility), Ansible, Security Assertion Markup Language (SAML), Software Engineering, Web Applications, Scripting, Google Cloud, Infrastructure as Code (IaC), Git, Containerization, Kubernetes, Information Technology, Deployment Automation, Cloud Integration, Api Design, Terraform, Jenkins
- **Published:** September 5, 2026
- **Apply:** https://harvardpartners.betterteam.com/senior-iam-solutions-engineer/apply/standard

## About the Role

* Platform Expertise: Deep knowledge of ForgeRock (AM, IDM, DS, IG) and Ping Advanced One Cloud.
 * Scripting & Development: Proficiency in Java, JavaScript, Python, or Groovy for custom workflows and API development.
 * Directory Services: Experience managing LDAP and Active Directory.
 * Infrastructure as Code (IaC): Hands-on experience with Terraform or Ansible.
 * Containerization: Experience deploying IAM solutions within OpenShift or Kubernetes environments., * Experience: 10 years in IAM engineering, with a focus on security patterns.
 * Education: Degree in Computer Science, Software Engineering, or a related field.
 * Certifications: ForgeRock or Ping Identity certifications are highly desirable, alongside cloud certifications.

## Description

We are seeking a seasoned Senior IAM Solutions Engineer to design, implement, and automate our identity platform. You will be responsible for bridging the gap between legacy on-premises systems and modern cloud-native identity solutions using the ForgeRock and Ping Identity stacks.
Core Responsibilities:

 * Design & Implementation: create IAM solutions using Ping Identity and ForgeRock products, including ForgeRock AM, IDM, DS, IG and Ping Advanced One cloud(PA1C).
 * Cloud Integration: Deploying and managing components in cloud platforms like AWS, Azure, or Google Cloud - Azure is preferred.
 * Authentication & Authorization: Developing custom authentication trees, SSO, MFA, and federation using protocols like SAML, OAuth 2.0, and OIDC.
 * Automation & DevOps: Drive "Identity-as-Code" initiatives by utilizing Terraform, Ansible, and CI/CD pipelines (Jenkins, Git, UrbanCode) for automated deployments on OpenShift.
 * Maintenance & Troubleshooting: Monitoring system health, performing upgrades, and resolving integration issues with web apps, APIs, and SaaS services.


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)

## Related Articles

- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again)
- [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers)
- [The Best Software Developer Blogs to Read](https://www.wearedevelopers.com/magazine/156-the-best-software-developer-blogs-to-read)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)