> Markdown version of [/jobs/ext/2792642-senior-identity-access-management-iam-consultant-forgerock-ping-identity](https://www.wearedevelopers.com/jobs/ext/2792642-senior-identity-access-management-iam-consultant-forgerock-ping-identity). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Identity & Access Management (Iam) Consultant - Forgerock/Ping Identity

- **Company:** iC Consult
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Amazon Web Services, User Authentication, Microsoft Azure, Cloud Computing, Cloud Computing Security, Continuous Integration, Electronic Signatures, Identity and Access Management, OAuth, OpenID, Ping (Networking Utility), Openid Connect, Kubernetes, Microservices
- **Published:** September 8, 2026
- **Apply:** https://www.buscojobs.com.es/senior-identity-access-management-iam-consultant-m-f-d-forgerock-ping-identity-en-madrid-ID-369354230

## About the Role

subject matter expert for the Ping Identity suite (formerly ForgeRock), including PingAM, PingIDM, and PingDS, to build scalable identity solutions.Cloud & Microservices Integration: Integrate identity services into cloud-native environments (AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices.Your Experience:PingIdentity/ForgeRock Ecosystem: Hands-on experience configuring and deploying PingAM, PingIDM, and PingDS (formerly ForgeRock) in enterprise environments.IAM Background: Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs.Deep Protocol Knowledge: In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments.Passkey Proficiency: Hands-on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics.Security & Infrastructure: Strong grasp of cloud
security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines.Bonus Points:Familiarity with European identity standards (eIDAS 2.0, LoA, and electronic signatures like AdES/QES).
Experience with PSD2/SCA compliance, orchestrated MFA, and continuous authentication.Expertise in managing complex B2C/B2B identity lifecycles and device-binding strategiesWhat We Offer - Enjoy a Range of BenefitsHomeOffice30 DaysVacationAdditionalHealthInsurancePersonalCoach10 Days of Trainingper YearEmployeeDiscountsRestaurantTicketCompany &Team EventsEmployee benefits are voluntary and may vary depending on location, work hours or other factors.

## Description

Senior Identity & Access Management (IAM) Consultant (m/f/d) - ForgeRock/Ping IdentityMaximice sus posibilidades de que su candidatura sea seleccionada asegurándose de que su CV y sus habilidades se ajustan al perfil.Join our team as aSenior Identity & Access Management (IAM) Consultant (m/f/d) - ForgeRock/Ping Identity-eitheron-site at our locations in Madrid or Barcelonaorflexibly remote from within Spain.Your Responsibilities:Architect Modern Authentication: Design and implement robust authentication architectures for web, mobile, and native applications, ensuring seamless user journeys across distributed systems.Master Identity Standards: Architect and govern complex OAuth 2.0 and OpenID Connect (OIDC) flows, including the implementation of PKCE, secure token lifecycles, and rotation strategies.Drive Passwordless Innovation: Lead the strategy and design for Passkeys (WebAuthn) and passwordless authentication to eliminate credential-based risks.Platform Orchestration: Serve as the subject matter expert for the Ping Identity suite (formerly ForgeRock), including PingAM, PingIDM, and PingDS, to build scalable identity solutions.Cloud & Microservices Integration: Integrate identity services into cloud-native environments (AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices.Your Experience:PingIdentity/ForgeRock Ecosystem: Hands-on experience configuring and deploying PingAM, PingIDM, and PingDS (formerly ForgeRock) in enterprise environments.IAM Background: Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs.Deep Protocol Knowledge: In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments.Passkey Proficiency: Hands-on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics.Security & Infrastructure: Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines.Bonus Points:Familiarity with European identity standards (eIDAS 2.0, LoA, and electronic signatures like AdES/QES).Experience with PSD2/SCA compliance, orchestrated MFA, and continuous authentication.Expertise in managing complex B2C/B2B identity lifecycles and device-binding strategiesWhat We Offer - Enjoy a Range of BenefitsHomeOffice30 DaysVacationAdditionalHealthInsurancePersonalCoach10 Days of Trainingper YearEmployeeDiscountsRestaurantTicketCompany &Team EventsEmployee benefits are voluntary and may vary depending on location, work hours or other factors.They are not intended as a guarantee or commitment and may be changed or discontinued at any time.Possible Locations for this VacancyCheck out the available locations for this position.You can select your preferred location in the application form .iC Consult - RemoteiC Consult - MadridSpainMore locationsSpainDiversity in all dimensions is very important to our teams.xqbhyrx We therefore include this criterion in our hiring decisions.#J-*****-Ljbffr


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [No More Post-its: Boost your login security with APIs](https://www.wearedevelopers.com/videos/1043-no-more-post-its-boost-your-login-security-with-apis)
- [Understanding Kubernetes in a visual way](https://www.wearedevelopers.com/videos/100085-understanding-kubernetes-in-a-visual-way)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)

## Related Articles

- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers)
- [WeAreDevelopers Dev Digest Issue 116 - The new search wars…](https://www.wearedevelopers.com/magazine/445-wearedevelopers-dev-digest-issue-116-the-new-search-wars)