Role Overview:

As the Senior IAM Engineer for NEO, you will be responsible for the technical execution, configuration, and infrastructure of the RVA’s new ForgeRock-based IAM platform. Working directly under the IAM Architect, you will bridge the gap between architectural design and operational reality, ensuring a robust, automated, and secure deployment.

Core Responsibilities:

• Platform Engineering: Build and maintain the IAM platform using Infrastructure as Code (IaC) and automated CI/CD pipelines.
• Technical Implementation: Configure and deploy protocols including SAML, OIDC, SCIM, RBAC, and ABAC within the ForgeRock ecosystem.
• Infrastructure Management: Setup and manage version control and deployment environments for IAM development.
• Onboarding & Integration: Lead the technical onboarding of business applications and integrate the platform.
• Resilience & Recovery: Implement technical controls for RPO/RTO and execute the Disaster Recovery setup for the IAM environment.
• Zero-Trust Execution: Technically align the IAM platform with a Zero-Trust architecture as defined by the project strategy.
• Agile Technical Delivery: Participate in all Scrum ceremonies (Sprint Planning, Daily Stand-ups, Sprint Reviews, and Retrospectives).

Required Technical Profile:

• Experience: Minimum 6 months of demonstrable experience in IAM engineering and infrastructure.
• Education: Master, Cybersecurity, Cryptanalysis & Forensics
• Certification: Certified Professional – PingAM
• Certification: Identity Manager – Technical Specialist
• Agile Mindset:
• Proven experience working in Scrum or Kanban teams.
• Ability to deliver “Definition of Done” (DoD) compliant code and documentation.
• Experience with Agile tooling (e.g., Jira, Confluence, Azure DevOps).
• Tooling & DevOps:
• Expertise in Version Control (Git) and CI/CD workflows.
• Proven experience with Infrastructure as Code (Terraform, Ansible, etc.).
• Specific experience with Ping One Advanced Identity cloud is highly preferred.

In addition to your CV, we ask you to answer the following question (the absence or inadequacy of the answer is eliminatory): what is an RCS in the context of PingOne Advanced Identity Cloud and why do we need it?