Senior Identity & Access Management (IAM) Consultant (m/f/d)- Ping IdentityJoin our team as aSenior Identity & Access Management (IAM) Consultant (m/f/d)- Ping Identity— eitheron-site at our locations in Madrid or Barcelonaorflexibly remote from within Spain.Your Responsibilities:- Architect Modern Authentication:Design and implement robust authentication architectures for web, mobile, and native applications, ensuring seamless user journeys across distributed systems.- Master Identity Standards:Architect and govern complexOAuth 2.0andOpenID Connect (OIDC)flows, including the implementation of PKCE, secure token lifecycles, and rotation strategies.- Drive Passwordless Innovation:Lead the strategy and design forPasskeys (WebAuthn)and passwordless authentication to eliminate credential-based risks.- Platform Orchestration:Serve as the subject matter expert for thePingIdentity (formerly ForgeRock)suite, including PingAM, PingIDM, and PingDirectory, to build scalable identity solutions.- Cloud & Microservices Integration:Integrate identity services intocloud-native environments(AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices.Your Experience:- Expert IAM Background:Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs.- Deep Protocol Knowledge:In-depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments.- Passkey Proficiency:Hands-on experience implementingPasskeys/WebAuthnand a clear understanding of the underlying security mechanics.- PingIdentity/ForgeRock Ecosystem:Advanced experience configuring and deployingPingAM, PingIDM, and PingDS(formerly ForgeRock) in enterprise environments.- Security & Infrastructure:Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines.What We Offer - Enjoy a Range of BenefitsHomeOffice30 DaysVacationAdditionalHealthInsurancePersonalCoach10 Days of Trainingper YearEmployeeDiscountsRestaurantTicketCompany &Team EventsYou can expect even more:High quality equipment of your choice - Apple or Windows, you decide!A 3-day bootcamp for your new start with us, where you will be trained around IAM and different technologiesiC Consult University – our comprehensive onboarding program accompanies you on your individual induction path with training modules, mentoring programs and eventsSupport for your personal and professional training and career development, e.G. through internal training and development programsFlat hierarchies, short decision-making paths and a high degree of personal responsibility with great scope for decision-making is what defines usHomeOffice30 DaysVacationAdditionalHealthInsurancePersonalCoach10 Days of Trainingper YearEmployeeDiscountsRestaurantTicketCompany &Team EventsYou can expect even more:High quality equipment of your choice - Apple or Windows, you decide!A 3-day bootcamp for your new start with us, where you will be trained around IAM and different technologiesiC Consult University – our comprehensive onboarding program accompanies you on your individual induction path with training modules, mentoring programs and eventsSupport for your personal and professional training and career development, e.G. through internal training and development programsFlat hierarchies, short decision-making paths and a high degree of personal responsibility with great scope for decision-making is what defines usEmployee benefits are voluntary and may vary depending on location, work hours or other factors. They are not intended as a guarantee or commitment and may be changed or discontinued at any time.Possible Locations for this VacancyCheck out the available locations for this position. You can select your preferred location in the application form .IC Consult - RemoteiC Consult - MadridSpainMore locationsSpainConvinced? Then send us your application!Your documents (resume, credentials, salary expectation, starting date), are best submitted via our online form – if you have any questions in advance, just send us an e-mail to careers@ic-consult.com .We’re looking forward to getting to know you.Diversity in all dimensions is very important to our teams. We therefore include this criterion in our hiring decisions.- Identity & Access Management (IAM) Engineer (m/f/d) – Ping IdentityBarcelona, Madrid, Spain Consulting Professional- Identity & Access Management (IAM) Engineer (m/f/d) – SailPoint ISCBarcelona, Madrid, Spain Consulting Professional- Privileged Access Management (PAM) Consultant – Delinea / CyberArk / Safeguard (OneIdentity) (m/f/d)Barcelona, Madrid, Spain Consulting ProfessionalYou haven’t found the job you’re looking for or have other skills that fit us? We are happy to consider your unsolicited application!Your Path to iCConsult – Here’s what to ExpectDo you find us or the position interesting?Then send us your application documents.After you have sent your application, you will receive a confirmation by e-mail.Your documents will then be carefully checked by our HR department before they are forwarded to the relevant contact person.The interest is mutual!It’s time to get to know each other.You will be invited by us for an initial conversation via email within about two weeks.This usually takes place virtually via Microsoft Teams.Are you as interested in us as we are in you?Then we’ll clarify the details.After the first conversation, further interviews may follow within one to two weeks to clarify open questions of detail, small work samples or to get to know the team.A perfect fit is important to us. That’s why we take a close look and at the same time give you comprehensive insights into our work so that we can both make a good decision for a long-term collaboration.Everything fits!Now it’s time to get started.We will prepare your contract and send it to you electronically for signature.Shortly after signing the contract, you’ll hear from us again to ensure a smooth onboarding process:- IT will ask which devices you would prefer to work with. There’s plenty to choose from and the most important thing is that you decide.- Our team leads can be contacted at any time and will give you information about your first day at work, your first week and what else you can expect.- The iCConsult University will prepare an individual induction path for you to make it easier for you to get started with a tailored training program in the first 365 days.Senior Identity & Access Management (IAM) Consultant (m/f/d)- Ping IdentityFIRST NAME *LAST NAME *EMAIL ADDRESS *PHONE NUMBER *DESIRED LOCATION *YOUR SALARY EXPECTATIONS *FILE UPLOAD *Drag & Drop Files Hereor 0 of 10When you use our application form your data will be encrypted when being transferred. Application documents are to be sent as PDF documents.PRIVACY POLICYInformation on how we protect your privacy may be obtained from our privacy statement .By clicking this box, I declare that my application may be submitted to affiliate companies of the iC Consult Group GmbH, as listed here for their application processes.WithdrawalYour declaration of consent is voluntary and may be revoked with effect for the future any time and without reasons having to be named by sending an e-mail to datenschutz@ic-consult.com .Discover our values and find out what makes us your perfect employer.We make sure that you feel completely comfortable with us, from flexible working time to a company car.#J-18808-Ljbffr