ForgeRock Identity Gateway (IG)/PingGateway, Engineer

Welcome page Returning candidate? Log back in! ForgeRock Identity Gateway (IG)/PingGateway, Engineer Job Locations US Requisition ID 2026-166305 Position Category Engineering Clearance Agency Clearance Responsibilities  We are seeking a ForgeRock Identity Gateway (IG)/PingGateway, Engineer to support a federal Identity and Access Management (IAM) program for the U.S. Department of Education Federal Student Aid (FSA). This role is responsible for designing and operating identity-aware reverse proxy and gateway solutions that secure applications, APIs, and microservices across a Zero Trust architecture. The engineer will serve as a key Policy Enforcement Point (PEP) architect, ensuring consistent identity and access control enforcement across legacy, cloud, and hybrid systems in alignment with federal security standards such as NIST, FICAM, FedRAMP, and Zero Trust principles. Key Responsibilities: Identity Gateway & Reverse Proxy EngineeringDesign, configure, and maintain PingGateway (ForgeRock IG) as an identity-aware reverse proxy Manage HTTP/S traffic routing, TLS termination, and load balancer integrations Enforce identity and access policies at the network edge Policy & Route DevelopmentDevelop and maintain JSON-based route configurations and gateway policies Implement filters, handlers, and scripts for request/response transformation Support credential replay, token injections, and header manipulation for legacy apps API & Microservices SecuritySecure APIs using PingGateway microgateway capabilities Implement OAuth 2.0 resource server patterns and token validation Integrate with external authorization systems (e.g., PingAuthorize) Authentication & FederationImplement SSO, MFA, and federated identity flows Configure OAuth 2.0, OpenID Connect (OIDC), and SAML integrations Support migration of legacy identity protocols to PingOne Advanced Identity Cloud Zero Trust EnforcementImplement gateway-based Policy Enforcement Points (PEP) within a Zero Trust architecture Enforce adaptive authentication and risk-based access controls Scripting & CustomizationDevelop Groovy and JavaScript scripts for custom gateway behavior Build custom authentication, token handling, and audit logging logic Observability & MonitoringConfigure logging, metrics, and audit trails for gateway traffic Integrate with enterprise SIEM and monitoring tools (e.g., Prometheus, OpenTelemetry) DevOps & DeploymentDeploy PingGateway in Docker and Kubernetes environments Support CI/CD pipelines and infrastructure-as-code practices Work with hardened container environments for federal systems Integration & Platform SupportIntegrate PingGateway with ForgeRock components (AM, IDM, DS) Support identity flows across hybrid and cloud environments Troubleshooting & SupportProvide L3 support for production incidents Perform root cause analysis and resolve complex identity and routing issues Ensure high availability and performance of gateway services Compliance & SecurityEnsure compliance with FISMA, FedRAMP, NIST, and federal IAM standards Support audits, security assessments, and continuous monitoring requirementsParticipate in design reviews and agile ceremonies Qualifications Required Qualifications: Bachelor’s degree and 5 years of experience or 9 years with a HS diploma/equivalent5+ years in Identity and Access Management (IAM) Hands-on experience with ForgeRock IG / PingGateway or similar API gateway/IAM reverse proxy solutions Experience in enterprise or federal environments Experience working in Agile/Scrum teamsForgeRock IG / PingGateway (route configuration, scripting, policy design) experienceFamiliarity in OAuth 2.0, OpenID Connect, SAML 2.0, JWT, LDAP Groovy and JavaScript scripting experience Experience in REST APIs and microservices security Familiarity in Kubernetes, Docker, and CI/CD pipelines LDAP/Active Directory integration experienceUnderstanding of Zero Trust architecture (NIST SP 800-207) Familiarity with cloud platforms (AWS, Azure,...