ForgeRock Identity Gateway (IG)/PingGateway, Engineer

Responsibilities We are seeking a ForgeRock Identity Gateway (IG)/PingGateway, Engineer to support a federal Identity and Access Management (IAM) program for the U.S. Department of Education Federal Student Aid (FSA). This role is responsible for designing and operating identity-aware reverse proxy and gateway solutions that secure applications, APIs, and microservices across a Zero Trust architecture. The engineer will serve as a key Policy Enforcement Point (PEP) architect, ensuring consistent identity and access control enforcement across legacy, cloud, and hybrid systems in alignment with federal security standards such as NIST, FICAM, FedRAMP, and Zero Trust principles. Key Responsibilities: Identity Gateway & Reverse Proxy Engineering Design, configure, and maintain PingGateway (ForgeRock IG) as an identity-aware reverse proxy Manage HTTP/S traffic routing, TLS termination, and load balancer integrations Enforce identity and access policies at the network edge Policy & Route Development Develop and maintain JSON-based route configurations and gateway policies Implement filters, handlers, and scripts for request/response transformation Support credential replay, token injections, and header manipulation for legacy apps API & Microservices Security Secure APIs using PingGateway microgateway capabilities Implement OAuth 2.0 resource server patterns and token validation Integrate with external authorization systems (e.g., PingAuthorize) Authentication & Federation Implement SSO, MFA, and federated identity flows Configure OAuth 2.0, OpenID Connect (OIDC), and SAML integrations Support migration of legacy identity protocols to PingOne Advanced Identity Cloud Zero Trust Enforcement Implement gateway-based Policy Enforcement Points (PEP) within a Zero Trust architecture Enforce adaptive authentication and risk-based access controls Scripting & Customization Develop Groovy and JavaScript scripts for custom gateway behavior Build custom authentication, token handling,