Lead ForgeRock Platform Engineer (IAM)

Role: Lead ForgeRock Platform Engineer  (IAM)
Location: San Antonio, TX (On-Site)
Mandatory Skills:
           Identity & Access Management: ForgeRock, PingIdentity, OAuth 2.0

• Programming & Frameworks: Python, Go (Golang), Java Spring Boot (facade architecture)
• Infrastructure & DevOps: Terraform, Linux server maintenance (VMs), Ansible Monitoring: Prometheus server build and setup

 Job Description
            Design, develop, and implement IAM solutions using the ForgeRock suite. Configure and customize ForgeRock AM, IDM, DS, and Identity Gateway components.

• Develop custom authentication modules, journeys, and authorization policies. Integrate ForgeRock with enterprise applications using SAML 2.0, OAuth 2.0, Open ID Connect (OIDC), LDAP, and REST APIs. Develop and maintain Java-based customizations and extensions for ForgeRock products.
• Implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation solutions. Design and implement user lifecycle management and provisioning workflows.
• Troubleshoot and resolve production issues related to authentication, authorization, and identity management.
• Collaborate with application teams, security architects, and infrastructure teams for IAM integrations.
• Perform platform upgrades, deployments, performance tuning, and security hardening. Create technical documentation, design documents, and operational procedures.
• Follow security best practices and compliance standards.

 
Required Skills

ForgeRock Platform Expertise ForgeRock Access Management (AM) ForgeRock Identity Management (IDM) ForgeRock Directory Services (DS) ForgeRock Identity Gateway (IG) Authentication Trees/Journeys Authorization Policies Intelligent Access Identity Governance concepts Java Development Core Java (Java 8/11/17) J2EE Technologies Spring Framework / Spring Boot RESTful Web Services Maven, Gradle JSON, XML Microservices Architecture IAM & Security Single Sign-On (SSO) Multi-Factor Authentication (MFA) OAuth 2.0 OpenID Connect (OIDC) SAML 2.0 LDAP JWT PKI and Certificate Management