Position: IAM Automation Engineer (Python & PingDS Focus)
Location: Hybrid- Montreal, QC
Job type: Full-Time/Permanent Hiring
We are seeking a highly analytical IAM Automation Engineer who uniquely bridges the gap between Identity & Access Management (IAM) infrastructure and core Python software engineering. In this role, you will move away from generic user administration to design, build, and support high-availability Directory Services ecosystems, with a heavy emphasis on PingDS (formerly ForgeRock Directory Services).
You will lead the creation of production-grade migration scripts, data reconciliation tools, custom API integrations, and validation frameworks. If you are an identity specialist who loves writing code, optimizing Linux systems, and automating complex workflows via Python and Git, this role is built for you.
Key Responsibilities
- Identity Automation & Engineering: Design, build, and maintain production-quality Python and Bash scripts to automate migrations, directory upgrades, complex data processing, and day-to-day operational tasks.
- Directory Services Management: Architect, deploy, configure, and support PingDS / ForgeRock DS platforms, managing large-scale infrastructure upgrades and replication schemas.
- Integration & Extension: Customize and troubleshoot PingDS extensions, plugins, and custom directory integrations. Review and adapt legacy, pre-existing Java components or optional C/C++ tooling to match modern architectures.
- System & Protocol Mastery: Maintain and optimize directory communication channels over LDAP/LDAPS protocols, managing schema definitions, replication rules, and secure certificate/TLS components.
- Linux Infrastructure Operations: Troubleshoot deep system-level behaviors across Linux/RHEL environments - managing filesystems, security permissions, daemon processes, networking stacks, and performing detailed log analysis.
- Modern Engineering Lifecycle: Implement software engineering best practices by utilizing Git, building robust CI/CD deployment pipelines, managing Python packages, executing automated test frameworks, and adhering to strict secure coding principles.
- AI-Assisted Efficiency: Safely leverage AI-assisted development tools (e.g., GitHub Copilot, ChatGPT) to accelerate scripting, documentation, and unit-testing workflows while strictly enforcing secure-use corporate guardrails.
Required Qualifications
- Core Development: Proven hands-on software development experience using Python, demonstrating a strong portfolio of custom utilities, API integrations, and robust automation tooling.
- Directory Infrastructure: Technical history supporting enterprise-grade Directory Services platforms, with an explicit preference for PingDS (ForgeRock Directory Services).
- Protocols & Formats: Complete mastery of LDAP/LDAPS mechanics, directory schemas, RESTful APIs, JSON processing, and core IAM security fundamentals.
- System Engineering: Strong proficiency engineering within Linux/RHEL environments, specifically running diagnostics on processes, networking, and security configurations.
- CI/CD & Source Control: Experience working within modern development ecosystems featuring Git, automated pipeline execution (CI/CD), package managers, and peer code reviews.
- Communication: Ability to confidently articulate technical problems, document script code, and collaborate effectively across infrastructure and security business units.
Preferred / "Good to Have" Skills
- Practical ability to read, understand, and modify Java-based components or plugins within PingDS.
- Functional development experience in C/C++.
- Direct experience executing large-scale directory infrastructure migrations or zero-downtime platform upgrades.
