Design secure access for customers, employees, applications, and APIs across Auth0, Okta, ForgeRock, Ping Identity, Azure AD, and Keycloak.
Identity architecture
Map customer journeys, applications, tenants, and federation requirements across Auth0, Okta, ForgeRock AM/IDM/DS, Ping Identity, Azure AD, and Keycloak. Separate authentication from authorization and define token and session boundaries.
Ping Identity & DaVinci
Design PingFederate, PingAccess, and PingID integrations, and orchestrate customer and workforce journeys in PingOne DaVinci. Configure PingAM, PingDS, and PingIDM for authentication, directory services, and identity management.
ForgeOps platform engineering
Deploy PingAM, PingDS, and PingIDM with ForgeOps on GKE, EKS, AKS, and enterprise Kubernetes. Connect identity governance with SailPoint and Saviynt, and privileged access with CyberArk PAS.
Migration & automation
Plan large-scale SSO migrations from legacy application servers, ADFS, and directory stores. Handle password-hash cutovers, SCIM provisioning, federation rollout, and rollback paths with Terraform, ForgeOps, and CI/CD.