Description

You will engineer, maintain, and support the ForgeRock identity stack across Access Management, Identity Management, and Directory Services.

This role is on-site.

Responsibilities

• Design and implement authentication flows, access policies, and identity lifecycle workflows using ForgeRock AM and IDM.
• Configure SSO and federation with Microsoft Entra ID, RSA, and ADFS using SAML 2.0, OAuth 2.0, and OIDC.
• Manage platform stability, including vulnerability remediation, patching, certificate lifecycle, and secrets rotation.
• Diagnose and resolve L2/L3 IAM incidents, covering authentication failures, federation issues, and performance latency.
• Partner with infrastructure and security teams to support IAM transformation and IDP consolidation initiatives.

Required Skills

• 8–10 years of hands-on experience in Identity & Access Management (IAM).
• Deep expertise in ForgeRock Access Management (AM), including Authentication Trees/Journeys and access policies.
• Strong experience with ForgeRock Identity Management (IDM) and Directory Services (DS).
• Proficiency in federation protocols: SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
• Experience integrating ForgeRock with Microsoft Entra ID (Azure AD) in multi-IdP enterprise environments.
• Proven troubleshooting skills for authentication flows, claims, tokens, and certificate trust configurations.
• Bachelor's degree in a relevant technical field.

Preferred Skills

• Experience with legacy identity systems and migration strategies.
• Ability to produce technical documentation and operational runbooks for audit support.

Key Skills

Education

Bachelor's degree