Forge Rock Developer
Senior Forge Rock / PingOne AIC Developer – Customer Identity (CIAM)
Location: Remote
About the role:
Design, build, and run the customer sign-up, sign-in, MFA, passwordless, and account recovery experiences on ForgeRock / PingOne Advanced Identity Cloud, plus the microservices around them that you'll own.
- Build and maintain authentication journeys, including custom scripted decision nodes in JavaScript.
- Implement OAuth 2.0, OIDC, and SAML integrations for web, mobile, and partner apps.
- Customize IDM managed objects, mappings, synchronization, and connectors.
- Develop supporting Java/Spring Boot microservices on AWS (EKS/Kubernetes).
- Integrate MFA, OTP, passkeys, and risk/fraud signals into login flows.
- Instrument the platform with observability pipelines and APM.
- Add logging, metrics, and alerting; troubleshoot production issues, and share on-call.
Requirements:
- 5+ years of software development with 3+ years hands-on in ForgeRock AM/IDM or PingOne AIC.
- Strong JavaScript and Java.
- Solid understanding of OAuth 2.0, OIDC, SAML, JWT, and session management.
- Experience with AWS APIs, CI/CD, and SDLC.
- Working knowledge of IAM and CI/CD.
Nice to have:
- FIDO2/WebAuthn, adaptive or risk-based authentication, and device profiling.
- AWS-native deployment tooling such as Code Pipeline.
- Observability tools such as Dynatrace, Prometheus/Grafana, or Splunk.
- ForgeRock or Ping Identity certification.
- CIAM experience at consumer scale.