Lead Ping Identity Engineer

At RELYzIT, we don't recruit — we build.

We unite exceptional builders: engineers, architects, creators, across the BENELUX and the GCC.
Vetted through VECTOR7™'s multi-signal evaluation, you evaluate once and carry that credential forever.
This is more than work. This is where builders build the future.

Lead Ping Identity Engineer & Technical Instructor - 15 months - Brussels Belgium

Freelance Position | Partial Remote | 15-Month Strategic Assignment

Intro

RELYzIT Talent is seeking an elite Lead Ping Identity Engineer & Technical Instructor for our client, a mission-critical 100-day strategic assignment with a 15-month project horizon. This is your opportunity to architect, automate, and elevate the next generation of Identity & Access Management (IAM) platforms, while empowering a team of engineers to master the Ping and ForgeRock ecosystem. If you thrive at the intersection of hands-on engineering and technical mentorship, this is where your impact will be felt across the enterprise.

Why This Role Matters

Our client is transforming their digital identity landscape to meet the highest standards of security, resilience, and agility. As the Lead Ping Identity Engineer & Technical Instructor, you will be the cornerstone of this transformation—delivering robust IAM solutions, automating cloud-native infrastructures, and ensuring the engineering team is equipped to sustain and evolve the platform. Your expertise will directly safeguard critical business applications, enforce zero-trust principles, and drive technical excellence across the organization.

What You’ll Be Doing

• Serve as the primary technical authority for the Ping Identity and ForgeRock IAM platforms, leading complex deployments and troubleshooting advanced identity protocols (SAML, OIDC, SCIM, RBAC, ABAC).
• Design, build, and automate cloud-native IAM infrastructures using Infrastructure as Code (IaC) and advanced CI/CD pipelines, ensuring secure, scalable, and resilient environments.
• Act as the internal technical instructor and mentor, conducting workshops, upskilling junior and medior engineers, and translating complex IAM workflows into actionable training.
• Implement and enforce rigorous standards for version control, deployment environments, and secrets management throughout the identity lifecycle.
• Lead the technical onboarding and seamless integration of critical business applications, enforcing identity governance and access controls.
• Engineer and maintain disaster recovery setups, ensuring high availability and compliance with RPO/RTO requirements across all IAM environments.
• Drive the technical execution of zero-trust principles, enforcing least-privilege access and continuous authentication across the platform.
• Champion agile technical delivery within Scrum/Kanban frameworks, unblocking the team, maintaining high code and documentation standards, and fostering a culture of continuous improvement.

What We’re Looking For

• Minimum 10+ years of demonstrable, enterprise-level experience in IAM engineering, infrastructure deployment, and technical enablement.
• Proven ability to mentor and train engineering teams, with a track record of translating technical designs into actionable learning for colleagues.
• Master’s degree in Cybersecurity, Cryptanalysis & Forensics, or equivalent extensive practical experience.
• Certified Ping Instructor (PingAM, PingIDM, PingDS, Ping Gateway, PingOne Advanced Identity Cloud, PingOne Davinci) is strictly required; additional advanced certifications in Ping/ForgeRock are highly preferred.
• Deep expertise in delivering technical initiatives within Agile (Scrum/Kanban) teams, with advanced proficiency in Agile tooling (Jira, Confluence, Azure DevOps).
• Master-level skills in Version Control (Git), CI/CD workflows, and Infrastructure as Code (Terraform, Ansible, etc.), with the ability to review, debug, and optimize team code.
• Direct, authoritative hands-on experience with PingOne Advanced Identity Cloud and the broader ForgeRock ecosystem.
• Strong communication and coaching skills, with the ability to lead technical workshops and foster a collaborative, high-performance engineering culture.

Technical Skills

• PingOne Advanced Identity Cloud (Expert)
• PingAM, PingDS, PingIDM, Ping Gateway (Expert)
• PingOne Davinci (Expert)
• OAUTH2/SAML (Expert)
• One Identity (Expert)
• SailPoint IdentityIQ (Expert)
• Docker / Kubernetes (Expert)
• DevOps (Expert)
• Infrastructure as Code: Terraform, Ansible (Expert)
• Version Control: Git (Expert)
• Agile Scrum, Kanban (Expert)
• Prince2 (Expert)

Language Proficiency

• Professional proficiency in English is required; additional proficiency in French or Dutch is a plus.

Other Requirements

• Certified Ping Instructor status is mandatory for internal enablement and training.
• Experience with Agile/Scrum and DevOps methodologies is essential.
• Ability to work partially remote with on-site presence in Brussels as required.
• Applicants must answer the following question in addition to submitting their CV:
  What is an RCS in the context of PingOne Advanced Identity Cloud and why do we need it?
  The absence or inadequacy of this answer is eliminatory.

Ready to build the future with RELYzIT Talent? Upload your CV and answer the RCS question to join a community where elite builders drive impact and innovation.