Looking for a job

Hao Luo

@haoluo

IAM Engineer at Authright delivering PingOne and ForgeRock solutions, including Equifax authentication and identity lifecycle integrations.

United States

Message

At Authright, I deliver enterprise IAM consulting engagements from requirements and design through implementation, testing, deployment, and production troubleshooting. I also mentor junior engineers and interns and contribute to technical training.

For Equifax, I built PingOne Platform and Advanced Identity Cloud integrations, including reusable DaVinci flows for authentication, user lifecycle processes, and policy-based access. I also implemented federated SSO with external identity providers and designed CI/CD promotion processes.

At Carnival Cruise Line, I led a ForgeRock AM upgrade from 6.5 to 7.2 for shore-side and shipboard systems, with migration planning for customer identity records. I designed AM/DS environments and cutover plans, then validated the upgraded environments through functional and performance testing.

My work has also included customized PingOne journeys at Accenture, CIAM migration work at CDW, and ForgeRock operations and cloud automation at ENEL NORTH AMERICA and HSBC BANK. Earlier, I built UiPath automation for USALLIANCE FINANCIAL mortgage processing workflows, reducing manual effort equivalent to three full-time roles.

Experience

Work history, roles, and key accomplishments

Current

PingOne IAM Engineer

Current

Equifax

Feb 2026 - Present (9 months)

Built PingOne Platform and Advanced Identity Cloud integrations, including DaVinci flows for authentication, user lifecycle processes, and policy-based access. Implemented federated SSO with external identity providers using SAML 2.0 and OAuth 2.0.

PingOne PingOne Advanced Identity Cloud DaVinci SAML 2.0 OAuth CI CD Identity Lifecycle Management

Current

IAM Engineer / Consultant

Current

Authright Inc.

Jun 2021 - Present (5 years 5 months)

Delivered enterprise IAM consulting engagements from requirements and design through implementation, testing, deployment, and production troubleshooting. Mentored junior engineers and interns and contributed to technical training.

PingOne ForgeRock IAM CIAM EIAM SSO Federation Authentication Provisioning User Lifecycle Automation Production Support

IAM Security & Risk Analyst

Kemper

Jun 2025 - Jan 2026 (7 months)

Built Identity Security Posture Management monitoring dashboards and recurring reports by correlating workforce identity and application-account records across enterprise systems. Defined risk indicators and exception criteria to guide remediation priorities.

Axonius Identity Security Posture Management (ISPM)Risk Analysis Reporting MFA Privileged Access

PingOne AIC Platform Lead

Accenture

Sep 2024 - Apr 2025 (7 months)

Led PingOne AIC development for a delivery squad, mentoring engineers and QA team while supporting production defects and releases. Developed and optimized customized journeys for registration, account recovery, social login, delegated helpdesk administration, and FIDO-based passwordless authentication.

PingOne Advanced Identity Cloud OIDC OAuth FIDO JavaScript SSO Mentorship

ForgeRock IAM Engineer

Carnival Cruise Line

Dec 2023 - Sep 2024 (9 months)

Led ForgeRock AM upgrade from 6.5 to 7.2 for shore-side and shipboard systems, with migration planning for millions of customer identity records. Designed AM/DS environments and cutover plans, using IDM reconciliation and LiveSync to synchronize user stores.

ForgeRock Open AM ForgeRock ForgeRock DS Identity Migrations Reconciliations LiveSync Performance Testing

PingOne AIC Solution Engineer

CDW

Jun 2023 - Nov 2023 (5 months)

Built PingOne AIC CIAM journeys while migrating from IBM identity platforms for both user and admin portal, incorporating social login, user registration, password recovery, and helpdesk admin management. Implemented SAML SSO for applications including MyChart and RSA.

PingOne Advanced Identity Cloud CIAM SAML SSO Groovy Identity Gateway RCS

ForgeRock IAM & Cloud Engineer

Enel North America

Oct 2022 - May 2023 (7 months)

Operated and customized ForgeRock AM, IDM, IG, and DS on AWS, using Terraform and Docker to support repeatable infrastructure and IAM component upgrade deployment. Migrated Jenkins CI jobs to AWS CodeBuild and built CloudWatch/Lambda-to-Splunk monitoring for ECS-hosted identity services.

ForgeRock Open AM ForgeRock ForgeRock IG ForgeRock DS AWS Terraform Docker Jenkins AWS CodeBuild Cloudwatch Lambda Splunk AWS ECS

ForgeRock IAM Engineer

HSBC Bank

Sep 2021 - Sep 2022 (1 year)

Implemented and supported ForgeRock AM/IDM/DS capabilities for SSO and MFA, handling platform upgrades, patches, and production incidents. Automated on-premises deployments with Jenkins and Ansible and supported migration to AWS EC2 with monitoring through AppDynamics and Splunk.