Introduction36 hours per weekStart: 01 March 20264- 6 months with possible extensionPossible extension: YesHybrid working (2 days in office)ZZP: YesOrganization/ DepartmentYou will be part of the Identity Federation team which provide to all users (internal and external, national as well as international) access to applications and services of ABN AMRO as the users want to use these applications and services, where possible, at any time, any place and via any device. Our users expect, more and more, that they can use a range of ABN AMRO internal and external authentication methods to log-on to these applications and services. In addition, employees and customers expect that they can reuse their credentials across banking platforms (legacy, private cloud, public cloud, etc.), national and international applications and services, including support for single sign-on (SSO) across these applications and service where possible, regardless if the applications and services are hosted internally or in the cloud.The Identity Federation team will deliver the components needed to support the above business drivers and will ensure that it will be possible to integrate new authentication means (supplied and not supplied by the bank) in a secure way within the ABN AMRO infrastructure. You will work closely with your team, architects and other stakeholders to deliver secure, scalable and high-performance systems. You will play a key role in the design, development, and implementation of IAM solutions within our enterprise.Job descriptionCH-ASM is rolled out for 70% of our customer appsAAB-ID flows are going via Ping FederateOTP flows are implemented via Ping FederateInteractive Voice Response (IVR) flows are implementedQR login goes via PingFederateSenior IAM specialist for PingAM or ForgeRock Access ManagementFull responsibility for deployment, implementation, and configuration; works independentlyDeploy product on Azure Kubernetes Service (AKS) starting 1st MarchCandidate must have extensive hands-on experience with Ping IAM and be able to deploy independently (has done it multiple times)The focus is on deployment and implementationSupport available from 2 colleagues for infrastructure, but candidate must know how to containerize and can deploy at scale independentlyRequirementsExpert in designing, developing and maintaining solutions using PingFederate, PingAccess and adapters (in Java). Expert in implementing OAuth2.0, OpenID Connect and other federation protocolsExpert in Java development with experience in building secure, scalable backend systemsExpert in developing and deploying custom adapters/plugins for PingStrong understanding of IAM principles, security architecture and identity LCMExcellent troubleshooting skills, especially in distributed environments.Proven ability to lead complex technical projectsAzure, Kubernetes, containers, Helm charts, Ingress configuration, secrets management, operational patternsStrong understanding of IAM principles, OIDC protocol, security architecture, and identity LCMTroubleshooting in distributed environmentsProven ability to lead complex technical projectsAbility to deploy functional environments quickly using proven patterns, avoiding trial-and-errorCandidate must understand approach, pros/cons, and operational best practicesPré: Groovy scripting skills