Description

Key Responsibilities

Platform Engineering & Support

• Provide hands-on engineering and operational support for the ForgeRock stack (AM, IDM, DS).
• Deliver enhancements, integrations, and production support activities.
• Manage platform stability ensuring high availability and minimal downtime.

Identity & Access Management Design

• Design and maintain:
  • Authentication flows (Authentication Trees/Journeys)
  • Access policies and authorization rules
  • Identity lifecycle and provisioning workflows
• Align IAM solutions with business and security requirements.

Federation & Integration

• Configure and support SSO and federation using:
  • Microsoft Entra ID (Azure AD)
  • RSA, ADFS, and legacy identity systems
• Implement and manage federation protocols:
  • SAML 2.0
  • OAuth 2.0
  • OpenID Connect (OIDC)
• Assess legacy applications and define migration or coexistence strategies.

Security & Compliance

• Own vulnerability management across ForgeRock components:
  • Analyze security findings
  • Apply patches and upgrades
  • Enforce secure configurations
• Manage:
  • Certificate lifecycle
  • Secrets/key rotation
• Support audits by providing documentation, evidence, and runbooks.

Troubleshooting & Incident Management

• Diagnose and resolve L2/L3 IAM issues, including:
  • Login/authentication failures
  • Federation and SSO issues
  • Performance and latency problems
  • Identity synchronization issues
• Perform root-cause analysis and implement preventive measures.

Collaboration

• Partner with application, infrastructure, and security teams.
• Support IAM-related transformation initiatives including IDP consolidation.
• Provide technical documentation and operational runbooks.

Mandatory Skills & Experience

• 8–10 years of experience in Identity & Access Management (IAM).
• Strong hands-on expertise with:
  • ForgeRock Access Management (AM)
    • Authentication Trees/Journeys
    • Access policies
    • Federation configurations
• Experience with ForgeRock IDM and Directory Services (DS).
• Deep knowledge of authentication and federation protocols:
  • SAML 2.0, OAuth 2.0, OIDC
• Experience integrating ForgeRock with Microsoft Entra ID (Azure AD).
• Experience working in multi-IdP enterprise environments.
• Strong troubleshooting skills across:
  • Authentication flows
  • Claims and tokens
  • Certificates and trust configurations

Key Skills

Education

Bachelor's degree