Senior ForgeRock IAM Engineer

About the role

Requirements

• 7–10+ years total in IAM, with 4–6+ years hands on across ForgeRock AM and exposure to IDM, IG, and DS/OpenDJ in production, experience in financial instructions are a plus.
• End to end delivery of SSO, MFA, federation, and API protection using SAML 2.0, OAuth 2.0, and OIDC across enterprise/hybrid environments.
• Installation, configuration, customization, patching, and upgrades of ForgeRock AM; strong grasp of realms, authentication trees, nodes, sessions, and policies at scale.
• Policy engineering with RBAC/ABAC, conditional/risk based access, and Zero Trust aligned controls with governance integration.
• Java and scripting (Bash/Python/Groovy) to build custom nodes, extensions, and automation; Git workflows and CI/CD familiarity.
• High availability/DR design, performance tuning, capacity planning, monitoring/observability, and incident response for AM in production.
• Directory Services expertise for identity stores, replication, indexing, and schema in DS/OpenDJ supporting AM sessions and auth data.
• Federation and token management for B2E/B2C/partner scenarios; secure app onboarding and third party integrations.
• Integration with security stack (SIEM/PAM), access review processes, and compliance frameworks (audit readiness).
• Cloud/container experience and gateway patterns (IG) and Java / Web Agents protecting microservices and APIs; hybrid deployments.
• Leadership: leading workstreams, mentoring, stakeholder management, and producing clear design/runbook documentation.
• Education/certifications: Bachelor’s in CS/IT or equivalent; ForgeRock certifications and relevant IAM / cloud security credentials preferred

Responsibilities

• End to end delivery of SSO, MFA, federation, and API protection using SAML 2.0, OAuth 2.0, and OIDC across enterprise/hybrid environments.
• Installation, configuration, customization, patching, and upgrades of ForgeRock AM; strong grasp of realms, authentication trees, nodes, sessions, and policies at scale.
• Policy engineering with RBAC/ABAC, conditional/risk based access, and Zero Trust aligned controls with governance integration.
• Java and scripting (Bash/Python/Groovy) to build custom nodes, extensions, and automation; Git workflows and CI/CD familiarity.
• High availability/DR design, performance tuning, capacity planning, monitoring/observability, and incident response for AM in production.
• Directory Services expertise for identity stores, replication, indexing, and schema in DS/OpenDJ supporting AM sessions and auth data.
• Federation and token management for B2E/B2C/partner scenarios; secure app onboarding and third party integrations.
• Integration with security stack (SIEM/PAM), access review processes, and compliance frameworks (audit readiness).
• Cloud/container experience and gateway patterns (IG) and Java / Web Agents protecting microservices and APIs; hybrid deployments.
• Leadership: leading workstreams, mentoring, stakeholder management, and producing clear design/runbook documentation.

Skills

• ForgeRock AM
• ForgeRock IDM
• ForgeRock IG
• DS/OpenDJ
• SAML 2.0
• OAuth 2.0
• OIDC
• RBAC
• ABAC
• Zero Trust
• Java
• Bash
• Python
• Groovy
• Git workflows
• CI/CD
• high availability
• disaster recovery
• security integration (SIEM/PAM)