Senior Identity & Access Management (IAM) Consultant (m/f/d) – Ping Identity
Join our team as a Senior Identity & Access Management (IAM) Consultant (m/f/d) – Ping Identity – either on‐site at our locations in Madrid or Barcelona or flexibly remote from within Spain.
Responsibilities
Architect Modern Authentication: Design and implement robust authentication architectures for web, mobile, and native applications, ensuring seamless user journeys across distributed systems.
Master Identity Standards: Architect and govern complex OAuth 2.0 and OpenID Connect (OIDC) flows, including the implementation of PKCE, secure token lifecycles, and rotation strategies.
Drive Passwordless Innovation: Lead the strategy and design for Passkeys (WebAuthn) and passwordless authentication to eliminate credential-based risks.
Platform Orchestration: Serve as the subject matter expert for the PingIdentity (formerly ForgeRock) suite, including PingAM, PingIDM, and PingDirectory, to build scalable identity solutions.
Cloud & Microservices Integration: Integrate identity services into cloud-native environments (AWS/Azure/GCP) and microservices architectures, applying hardening and risk mitigation best practices.
Experience
Expert IAM Background: Proven track record in IAM architecture with the ability to translate complex security requirements into scalable technical designs.
Deep Protocol Knowledge: In‐depth technical mastery of OAuth 2.0, OIDC 1.0, and modern authentication patterns in both web and native environments.
Passkey Proficiency: Hands‐on experience implementing Passkeys/WebAuthn and a clear understanding of the underlying security mechanics.
PingIdentity/ForgeRock Ecosystem: Advanced experience configuring and deploying PingAM, PingIDM, and PingDS (formerly ForgeRock) in enterprise environments.
Security & Infrastructure: Strong grasp of cloud security, Kubernetes (EKS), and the ability to apply security hardening within CI/CD pipelines.
Benefits
Home Office
30 Days Vacation
Additional Health Insurance
Personal Coach
10 Days of Training per Year
Employee Discounts
Restaurant Ticket
Company & Team Events
Employee benefits are voluntary and may vary depending on location, work hours or other factors. They are not intended as a guarantee or commitment and may be changed or discontinued at any time.
You can expect even more:
High quality equipment of your choice - Apple or Windows, you decide!
A 3-day bootcamp for your new start with us, where you will be trained around IAM and different technologies.
iC Consult University – our comprehensive onboarding program accompanies you on your individual induction path with training modules, mentoring programs and events.
Support for your personal and professional training and career development, e.g. through internal training and development programs.
Flat hierarchies, short decision‐making paths and a high degree of personal responsibility with great scope for decision‐making is what defines us.
Possible Locations for this Vacancy
Check out the available locations for this position. You can select your preferred location in the application form.
iC Consult – Remote
iC Consult – Madrid
Spain
More locations
Convinced? Then send us your application!
Your documents (resume, credentials, salary expectation, starting date) are best submitted via our online form – if you have any questions in advance, just send us an e‐mail to careers@ic-consult.com.
We're looking forward to getting to know you.
Diversity in all dimensions is very important to our teams. We therefore include this criterion in our hiring decisions.
Your Path to iCConsult – Here's what to Expect
Do you find us or the position interesting? Then send us your application documents.
After you have sent your application, you will receive a confirmation by e‐mail.
Your documents will then be carefully checked by our HR department before they are forwarded to the relevant contact person.
The interest is mutual! It's time to get to know each other.
You will be invited by us for an initial conversation via email within about two weeks.
This usually takes place virtually via Microsoft Teams.
Are you as interested in us as we are in you? Then we'll clarify the details.
After the first conversation, further interviews may follow within one to two weeks to clarify open questions of detail, small work samples or to get to know the team.
A perfect fit is important to us. That's why we take a close look and at the same time give you comprehensive insights into our work so that we can both make a good decision for a long‐term collaboration.
Everything fits! Now it's time to get started.
We will prepare your contract and send it to you electronically for signature.
Shortly after signing the contract, you'll hear from us again to ensure a smooth onboarding process.
IT will ask which devices you would prefer to work with. There's plenty to choose from and the most important thing is that you decide.
Our team leads can be contacted at any time and will give you information about your first day at work, your first week and what else you can expect.
The iCConsult University will prepare an individual induction path for you to make it easier for you to get started with a tailored training program in the first 365 days.
#J-18808-Ljbffr