Job Closed

This listing is no longer active.

Peraton Corporation logo
Peraton Corporation

Peraton Corporation, a national security company headquartered in Herndon, Virginia, supplies solutions for mission-critical programs and systems. Founded in 2017, Peraton's missio

ForgeRock Identity Gateway (IG)/PingGateway, Engineer

Location

United States

Posted

30 days ago

Salary

$80K - $128K / year

Seniority

Mid Level

Job Description

ForgeRock Identity Gateway (IG)/PingGateway, Engineer

Peraton Corporation

Role Description We are seeking a ForgeRock Identity Gateway (IG)/PingGateway, Engineer to support a federal Identity and Access Management (IAM) program for the U.S. Department of Education Federal Student Aid (FSA). This role is responsible for designing and operating identity-aware reverse proxy and gateway solutions that secure applications, APIs, and microservices across a Zero Trust architecture. The engineer will serve as a key Policy Enforcement Point (PEP) architect, ensuring consistent identity and access control enforcement across legacy, cloud, and hybrid systems in alignment with federal security standards such as NIST, FICAM, FedRAMP, and Zero Trust principles. Key Responsibilities: - Identity Gateway & Reverse Proxy Engineering - Design, configure, and maintain PingGateway (ForgeRock IG) as an identity-aware reverse proxy - Manage HTTP/S traffic routing, TLS termination, and load balancer integrations - Enforce identity and access policies at the network edge - Policy & Route Development - Develop and maintain JSON-based route configurations and gateway policies - Implement filters, handlers, and scripts for request/response transformation - Support credential replay, token injections, and header manipulation for legacy apps - API & Microservices Security - Secure APIs using PingGateway microgateway capabilities - Implement OAuth 2.0 resource server patterns and token validation - Integrate with external authorization systems (e.g., PingAuthorize) - Authentication & Federation - Implement SSO, MFA, and federated identity flows - Configure OAuth 2.0, OpenID Connect (OIDC), and SAML integrations - Support migration of legacy identity protocols to PingOne Advanced Identity Cloud - Zero Trust Enforcement - Implement gateway-based Policy Enforcement Points (PEP) within a Zero Trust architecture - Enforce adaptive authentication and risk-based access controls - Scripting & Customization - Develop Groovy and JavaScript scripts for custom gateway behavior - Build custom authentication, token handling, and audit logging logic - Observability & Monitoring - Configure logging, metrics, and audit trails for gateway traffic - Integrate with enterprise SIEM and monitoring tools (e.g., Prometheus, OpenTelemetry) - DevOps & Deployment - Deploy PingGateway in Docker and Kubernetes environments - Support CI/CD pipelines and infrastructure-as-code practices - Work with hardened container environments for federal systems - Integration & Platform Support - Integrate PingGateway with ForgeRock components (AM, IDM, DS) - Support identity flows across hybrid and cloud environments - Troubleshooting & Support - Provide L3 support for production incidents - Perform root cause analysis and resolve complex identity and routing issues - Ensure high availability and performance of gateway services - Compliance & Security - Ensure compliance with FISMA, FedRAMP, NIST, and federal IAM standards - Support audits, security assessments, and continuous monitoring requirements - Participate in design reviews and agile ceremonies Qualifications - Bachelor’s degree and 5 years of experience or 9 years with a HS diploma/equivalent - 5+ years in Identity and Access Management (IAM) - Hands-on experience with ForgeRock IG / PingGateway or similar API gateway/IAM reverse proxy solutions - Experience in enterprise or federal environments - Experience working in Agile/Scrum teams - ForgeRock IG / PingGateway (route configuration, scripting, policy design) experience - Familiarity in OAuth 2.0, OpenID Connect, SAML 2.0, JWT, LDAP - Groovy and JavaScript scripting experience - Experience in REST APIs and microservices security - Familiarity in Kubernetes, Docker, and CI/CD pipelines - LDAP/Active Directory integration experience - Understanding of Zero Trust architecture (NIST SP 800-207) - Familiarity with cloud platforms (AWS, Azure, or GCP) - U.S. Citizenship required - Must be able to obtain and maintain the required agency clearance Preferred Qualifications - ForgeRock or Ping Identity certifications - CISSP, Security+, or similar cybersecurity certifications - Experience with PingAuthorize or externalized authorization models - Experience with federal IAM programs (FSA, DHS, DoD, etc.) - Knowledge of observability tools (Prometheus, OpenTelemetry) - Experience with SailPoint, Okta, or CyberArk - Familiarity with advanced security topics (mTLS, FAPI, PKI, or post-quantum crypto) - Agile/SAFe certifications Company Description Peraton is a next-generation national security company that drives missions of consequence spanning the globe and extending to the farthest reaches of the galaxy. As the world’s leading mission capability integrator and transformative enterprise IT provider, we deliver trusted, highly differentiated solutions and technologies to protect our nation and allies. Peraton operates at the critical nexus between traditional and nontraditional threats across all domains: land, sea, space, air, and cyberspace. The company serves as a valued partner to essential government agencies and supports every branch of the U.S. armed forces. Each day, our employees do the can’t be done by solving the most daunting challenges facing our customers. Target Salary Range $80,000 - $128,000. This represents the typical salary range for this position. Salary is determined by various factors, including but not limited to, the scope and responsibilities of the position, the individual’s experience, education, knowledge, skills, and competencies, as well as geographic location and business and contract considerations. Depending on the position, employees may be eligible for overtime, shift differential, and a discretionary bonus in addition to base pay. EEO EEO: Equal opportunity employer, including disability and protected veterans, or other characteristics protected by law.

Related Categories

Related Job Pages

More Engineer Jobs

Full TimeRemoteTeam 10,001+Since 1978H1B Sponsor

• Define and map operational workflows for warehouse and order management functions. • Translate operational requirements into Manhattan Active system behaviors and functional specifications. • Create detailed process documentation and Standard Operating Procedures (SOPs). • Partner with Super Users to co-develop System Work Instructions used during training and post-go-live support. • Provide business input to configuration and development teams during implementation phases. • Validate system behavior against business requirements through QA and UAT processes. • Act as an advisor to operational and customer teams during deployment execution. • Work hand-in-hand with Super Users, Deployment Managers, and Training teams to align process and system documentation. • Serve as a knowledge resource for Manhattan platform capabilities and best practices. • Identify process optimization opportunities through data, observation, and feedback.

Texas
Instacart logo

Senior Corporate Engineer

Instacart

Instacart invites the world to share love through food. This is how homemade is made.

Engineer30 days ago
Full TimeRemoteTeam 1,001-5,000Since 2012H1B Sponsor

• Own the architecture, security, and day-to-day operations of our enterprise Okta tenant, including delivery of Okta Identity Governance (OIG), lifecycle management, SCIM provisioning, SSO integrations (SAML/OIDC), MFA, risk-based policies, and device trust. • Design and maintain Infrastructure-as-Code for identity and access using Terraform, building reusable modules, guardrails, and automated workflows integrated with HRIS and ITSM systems to achieve least-privilege and timely provisioning/deprovisioning. • Architect, operate, and continuously improve Instacart’s office network infrastructure (firewalls, routing/switching, wireless) across SF, NYC, and Toronto; drive zero-trust segmentation, observability, capacity planning, and vendor/partner management. • Lead and participate in incident response for identity and network events, drive rapid mitigation and root-cause analysis, and implement durable remediations through post-incident reviews and change management. • Standardize and execute certificate and key lifecycles for SAML/TLS across SaaS applications; eliminate manual toil with scripting and robust runbooks that increase reliability and auditability. • Partner with Security and Compliance to meet controls and audit needs (e.g., access reviews, evidence collection), improve access risk management, and unlock license savings via automated revocation and right-sizing. • Mentor teammates, elevate documentation and operational excellence, and help shape the roadmap by prioritizing high-impact work in a rapidly evolving environment.

California + 3 moreAll locations: California | Connecticut | New Jersey | New York
$156K - $197.5K / year
epay, a Euronet Worldwide Company logo

QA Engineer

epay, a Euronet Worldwide Company

Connecting Brands and Consumers

Engineer30 days ago
Full TimeRemoteTeam 1,001-5,000H1B No Sponsor

Role Description Experienced and proactive Quality Engineer is in charge to lead our quality assurance efforts. Play a key role in ensuring the delivery of high-quality software by designing and implementing robust testing strategies. This role requires advanced technical expertise, leadership skills, and a strong ability to collaborate across teams to drive quality initiatives and mentor junior team members. - Define and execute comprehensive test strategies, including functional, performance, and static testing. - Able to design complex test scenarios and with deep understanding of SDLC, test techniques like equivalence partitioning, boundary value analysis, branch testing among others. - Develop and maintain automated test frameworks and scripts using tools like Selenium or Cypress. - Collaborate with developers, product managers, and other stakeholders to ensure quality is embedded throughout the software development lifecycle. - Identify and drive improvements in QA processes, tools, and methodologies. - Maintain detailed documentation of test cases, test scripts, test results and issue resolution. - Use Excel for analyzing and reporting on testing metrics, applying advanced functions as needed. - Ensure thorough documentation of test cases, test results, and issue resolution. - Take ownership of the quality and testing of major modules or projects. - Demonstrate effective time management to handle multiple priorities and deliver high-quality results on time. - Provide critical feedback to stakeholders, including clients, project managers, and developers, regarding software quality and areas for improvement. Qualifications - Education: Bachelor’s degree in Computer Science, Engineering, or a related field (or equivalent experience). - Experience: 5+ years of experience in software quality assurance with at least 1 year of experience in test automation. - Data Manipulation: Strong ability to understand data relationships and perform effective data manipulation using advanced spreadsheet functions. - Tools: Experience with Jira for documentation and issue tracking, Microsoft Teams for collaboration, Excel for reporting (including advanced functions), and SQL Server Management Studio for backend data validation. - Experience of test automation tools (e.g., Selenium). - Problem-Solving: Strong analytical and problem-solving skills with the ability to troubleshoot complex issues and debugging. Requirements - 40 hours per week Benefits - Life insurance 100% covered - 50/50 Health insurance (optional) - 50/50 Half scholarships (optional) - Annual salary appraisal - Internal savings and credits association - Christmas bonus above the law - Internet bonus - Cellphone bonus - Other benefits

El Salvador
AlphaHire logo

Healthcare Project Engineer, Electrical Projects

AlphaHire

The Operating System for Automated Hiring

Engineer30 days ago
Full TimeRemoteTeam 11-50Since 2020H1B No Sponsor

• Support commercial electrical projects from preconstruction through closeout alongside Project Managers and field leadership • Assist with RFIs, submittals, change orders, procurement tracking, and project documentation management • Coordinate with field teams, vendors, subcontractors, and clients to maintain project flow and communication • Review construction drawings, specifications, schedules, and electrical documentation for accuracy and coordination • Track project progress, material deliveries, manpower updates, and schedule milestones across active projects • Participate in project meetings, site visits, and coordination efforts with internal and external stakeholders • Maintain organized project records, logs, and reporting throughout the construction lifecycle • Assist with cost tracking, billing support, forecasting updates, and project status reporting • Help identify and resolve field coordination issues, scheduling conflicts, and documentation gaps • Support multiple commercial electrical projects simultaneously in a fast-paced construction environment

Michigan