Lead ForgeRock Platform Engineer

Role: Lead ForgeRock Platform Engineer
Location: San Antonio, TX
Hiring mode: Open for remote for exclusive candidates

Mandatory Skills:

• Identity & Access Management: ForgeRock, PingIdentity, OAuth 2.0
• Programming & Frameworks: Python, Go (Golang), Java Spring Boot (facade architecture)
• Infrastructure & DevOps: Terraform, Linux server maintenance (VMs), Ansible
• Monitoring: Prometheus server build and setup

Job Description

• Design, develop, and implement IAM solutions using the ForgeRock suite.
• Configure and customize ForgeRock AM, IDM, DS, and Identity Gateway components.
• Develop custom authentication modules, journeys, and authorization policies.
• Integrate ForgeRock with enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and REST APIs.
• Develop and maintain Java-based customizations and extensions for ForgeRock products.
• Implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation solutions.
• Design and implement user lifecycle management and provisioning workflows.
• Troubleshoot and resolve production issues related to authentication, authorization, and identity management.
• Collaborate with application teams, security architects, and infrastructure teams for IAM integrations.
• Perform platform upgrades, deployments, performance tuning, and security hardening.
• Create technical documentation, design documents, and operational procedures.
• Follow security best practices and compliance standards.

Required Skills
ForgeRock Platform Expertise

• ForgeRock Access Management (AM)
• ForgeRock Identity Management (IDM)
• ForgeRock Directory Services (DS)
• ForgeRock Identity Gateway (IG)
• Authentication Trees/Journeys
• Authorization Policies
• Intelligent Access
• Identity Governance concepts

Java Development

• Core Java (Java 8/11/17)
• J2EE Technologies
• Spring Framework / Spring Boot
• RESTful Web Services
• Maven, Gradle
• JSON, XML
• Microservices Architecture

IAM & Security

• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• OAuth 2.0
• OpenID Connect (OIDC)
• SAML 2.0
• LDAP
• JWT
• PKI and Certificate Management