Senior IAM Engineer – ForgeRock

This is a fully remote position, open to applicants in United States.

📋 Description

• Oversee the daily administration, operational upkeep, and custom enhancement of our Identity and Access Management platform.

• Ensure the ForgeRock environment maintains high availability and optimal performance.

• Actively create custom scripts, authentication journeys, and plugins to adapt to evolving business requirements.

• Monitor the health of the platform across the ForgeRock software suite.

• Manage system upgrades and critical security patches with minimal disruption.

• Maintain directory integrations to ensure consistent synchronization between ForgeRock components and connected enterprise systems.

• Optimize system capacity by fine-tuning JVM, database connectors, and LDAP server performances.

• Provide Level 3 technical support to resolve complex identity federation, SSO, and authentication routing issues.

• Conduct root cause analysis on system failures and implement permanent solutions.

• Oversee backup and disaster recovery protocols.

• Maintain technical documentation, including Standard Operating Procedures (SOPs) and architecture diagrams.

• Develop custom authentication scripts and logic plugins using Java, JavaScript, or Groovy.

• Configure authentication journeys that incorporate multi-factor authentication and Zero Trust validation policies.

• Create JSON-based route profiles within the ForgeRock Identity Gateway.

⛳️ Requirements

• A minimum of 6 years of dedicated professional experience in Identity & Access Management (IAM).

• At least 2 years of specialization within the ForgeRock ecosystem.

• Proven expertise in ForgeRock AM, IDM, DS, and IG components.

• In-depth understanding of core identity security standards including OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and LDAP.

• Proficient in writing production-quality scripts in Groovy, JavaScript, or Java.

• Comfortable working within Linux Server environments, utilizing command-line interfaces and shell scripting.

• Certifications: ForgeRock Certified Access Management Specialist, Identity Management Specialist, or equivalent certifications from Ping Identity (preferred).

• Hands-on experience with Git version control, Jenkins, Docker, or Kubernetes clusters (preferred).

🏝️ Benefits

• Unlimited Paid Days Off.

• Three health plan options.

• 401k with a company match.

• Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts.

• Family Forming Benefit, including fertility coverage and adoption/surrogacy reimbursement.

• Paid childbearing and paternal leave.

• Education Reimbursement, Student Loan Assistance, or 529 College Funding.

• Sabbatical leave.

• Wellness program.

• Flexible work schedule.