Delivery Centric is seeking an experienced Identity Engineer to design and support IAM solutions using Ping Identity and/or ForgeRock, covering authentication, authorization, federation and directory services. The role also involves backend integrations using Go and/or Java to deliver secure and scalable identity solutions.
What You’ll Do
- Design, implement, and maintain identity solutions using Ping Identity (PingFederate, PingAccess, Ping Directory, PingOne) and/or ForgeRock (AM, IDM, DS, IG) products.
- Build and maintain authentication and authorization flows: OAuth 2.0, OpenID Connect, SAML 2.0, MFA, and password less/adaptive authentication.
- Develop custom plugins, nodes/authentication trees, policy scripts, and extensions in Java or Groovy (ForgeRock) or via SDKs/APIs (Ping).
- Build and integrate backend services and APIs in Go or Java that consume or extend IAM platform capabilities (token issuance, session management, user provisioning, etc.).
- Configure and manage federation with external Identity Providers/Service Providers (B2B, B2C, partner integrations).
- Own directory services architecture (LDAP/DS) including schema design, replication, and performance tuning.
- Automate deployment and configuration using Infrastructure-as-Code (Terraform, Ansible) and CI/CD pipelines.
- Troubleshoot production identity issues, perform root cause analysis, and drive resolution with minimal downtime.
- Ensure solutions meet security, compliance, and audit requirements (OWASP, NIST, ISO 27001, PCI-DSS, or relevant regulatory standards).
- Collaborate with security, platform, and application teams to define IAM standards and best practices.
- Participate in on-call rotation for critical identity infrastructure.
Must-Have Qualifications
- 4+ years of hands-on experience with Ping Identity (PingFederate/PingAccess/PingOne) and/or ForgeRock (AM/IDM/DS/IG) platforms.
- Solid understanding of identity protocols: OAuth 2.0, OIDC, SAML 2.0, SCIM, WS-Fed.
- Working proficiency in Go or Java for building backend services, custom authentication nodes, or API integrations.
- Experience with LDAP directory services (design, tuning, replication).
- Familiarity with containerized/cloud environments (Docker, Kubernetes) and cloud platforms (AWS/Azure/GCP).
- Experience with CI/CD tooling and Infrastructure-as-Code (Terraform, Jenkins, GitLab CI, etc.).
- Strong understanding of security fundamentals: TLS, encryption at rest/in transit, secrets management, least-privilege access.
- Excellent troubleshooting skills across distributed systems and network layers (HTTP, TCP/IP, DNS).
Nice-to-Have
- ForgeRock or Ping certifications (e.g., ForgeRock Certified Access Management/Directory Services Specialist, Ping Certified Professional).
- Experience with adaptive/risk-based authentication and fraud detection integrations.
- Exposure to financial services or other highly regulated environments.
- Experience with API gateways (Apigee, Kong, PingAccess as gateway) and microservices architecture.
- Familiarity with policy-as-code and zero-trust architecture principles.
- Scripting experience in Groovy, Python, or Bash for automation.
How to Apply
Ready to take on a Senior Identity Engineer – Ping/ForgeRock role in Melbourne with Delivery Centric? Apply now to join a team that delivers excellence and realises value for its clients.