Peraton

ForgeRock Federation Engineer

Peraton  •  $80k - $128k/yr  •  United States (Onsite)  •  17 hours ago
Apply
AI can make mistakes so check important info. Chat history is never stored.

Job Description

Responsibilities

We are seeking a skilled ForgeRock Federation Engineer to support the design, implementation, and maintenance of secure identity federation solutions within a large federal IAM environment. This role focuses on enabling secure authentication and authorization data exchange across enterprise, cloud, and partner systems using the ForgeRock (PingOne Advanced Identity Cloud) platform, while ensuring compliance with federal security standards.

Key Responsibilities:

  • Configure and manage identity federation and SSO using SAML 2.0, OAuth 2.0, and OIDC
  • Establish and maintain IdP/SP trust relationships across enterprise and cloud systems
  • Design and implement ForgeRock components (AM, IDM, DS, IG) for scalable IAM solutions
  • Develop authentication journeys supporting MFA, adaptive access, and Zero Trust policies
  • Integrate with directory services (LDAP, Active Directory, Azure AD / Entra ID)
  • Enable application and API integrations using REST, SCIM, and federation protocols
  • Develop custom authentication nodes and scripts (Java, Groovy, JavaScript)
  • Support platform upgrades, patching, and DevOps automation (Docker, Kubernetes, CI/CD)
  • Ensure compliance with federal standards (NIST, FISMA, FedRAMP)
  • Troubleshoot complex federation and integration issues (L3 support)
  • Collaborate within agile teams for delivery and continuous improvement

Qualifications

Required Qualifications:

  • Bachelor’s degree and 5 years of experience or 9 years with a HS diploma/equivalent
  • 5 years of IAM engineering experience
  • Experience with ForgeRock or PingOne platform
  • Experience implementing federation and SSO solutions
  • Experience working in agile environments
  • Federation Protocols: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), JWT, PKCE, mTLS experience
  • ForgeRock/Ping: AM, IDM, DS, IG configuration and administration experience
  • Directory Services: LDAP, Active Directory, Azure AD (Entra ID) experience
  • Experience in Java, Groovy, JavaScript; REST API integration
  • DevOps: Docker, Kubernetes, CI/CD tools (Jenkins, GitLab CI), Git experience
  • Familiarity with AWS, Azure, or GCP
  • Security: MFA, RBAC/ABAC, Zero Trust principles
  • U.S. Citizenship required
  • Ability to obtain and maintain the required agency clearance

Preferred Qualifications:

  • Experience with Okta, SailPoint, CyberArk, or IBM Security Verify
  • Familiarity with PingFederate, PingAccess, or PingDirectory
  • Experience with CIAM (Customer Identity and Access Management)
  • Knowledge of identity analytics or AI-driven IAM tools
  • Prior federal IAM program experience (DoD, DHS, FSA, etc.)
  • Familiarity with NIST, FISMA, and FedRAMP compliance

Certifications (Preferred):

  • ForgeRock or Ping Identity certifications
  • CISSP or Certified Identity and Access Manager (CIAM)
  • CompTIA Security+

Peraton Overview

Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Visit peraton.com to learn how we’re keeping people around the world safe and secure.

Target Salary Range

$80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay.

EEO

EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Peraton

About Peraton

At Peraton, we're at the forefront of delivering the next big thing every day. We're the partner of choice to help solve some of the world's most daunting challenges, delivering bold, new solutions to keep people around the world safer and more secure.

How do we do it? By thinking differently. We're not mired in the past. We look at all problems with fresh eyes. We look past the obvious to bring the best talent, tech, and ideas together to completely transform how things get done. So bring your unique ideas, your entrepreneurial spirit, and your drive to succeed and get ready to be part of something bigger. Get ready to do the can't be done.

________

Recruitment fraud is a growing trend where fraudsters have been known to attempt to use our name to trick job seekers with fake employment opportunities. This type of scam is typically carried out through fake job postings, fake websites, or email accounts claiming to be from Peraton. The intent of recruitment fraud is to gain access to your personal information, such as your banking information, credit card number, or social security number.

Please be aware that our careers site can be found at careers.peraton.com and our corporate site can be found at peraton.com.

To learn more about Recruitment fraud and what to expect and not to expect from a Peraton recruiter, please visit: https://careers.peraton.com/recruitment-fraud/

Industry
IT & Software
Company Size
10,000+ employees
Headquarters
Reston, Virginia
Year Founded
2017
Social Media