ForgeRock Lead Engineer

Project Role : ForgeRock Lead Engineer
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : ForgeRock Identity Management
Good to have skills : ForgeRock Access Management
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary
As a Lead ForgeRock Engineer, you will serve as the Subject Matter Expert (SME) for our global Identity and Access Management platform. You will be responsible for the a high-level orchestration, and security governance of the ForgeRock stack (AM, IDM, DS, IG). You will bridge the gap between business requirements and technical execution, leading a team of junior and mid-level administrators

Key Responsibilities

1. Platform Administration & Health
   Maintenance: Perform system upgrades, patches, and version migrations for PingAM, PingIDM, and PingDS.
   Monitoring: Use tools like Splunk, ELK, or Prometheus to monitor system health, log rotation, and performance bottlenecks.
   Directory Management: Manage LDAP schemas, indexes, and replication in Directory Services (DS) to ensure data consistency.

2. Identity Lifecycle & Integration
   App Onboarding: Configure SAML 2.0, OIDC, and OAuth2 integrations to enable Single Sign-On (SSO) for new applications.
   Provisioning: Build and manage reconciliation/sync jobs in IDM to automate user onboarding and offboarding from HR systems (like Workday) to Active Directory.
   Policy Enforcement: Create and maintain authorization policies and Authentication Trees (Journeys) to enforce MFA and adaptive risk-based security.

3. Security & Compliance
   Governance: Implement Role-Based Access Control (RBAC) and ensure the principle of least privilege is followed.
   Auditing: Generate reports for compliance (SOX, GDPR, HIPAA) showing who has access to what and when.
   Incident Response: Troubleshoot login failures, session timeouts, and synchronization errors.

4. Modern DevOps Tasks
   Automation: Use Groovy or JavaScript to write custom scripts for authentication nodes or IDM triggers.
   IaC: Manage environment configurations using Terraform or Ansible and deploy via CI/CD pipelines.where applicable).

5.Governance, Security & Mentorship
Compliance: Ensure the platform meets global standards (GDPR, SOX, HIPAA) through robust audit logging and automated access reviews.
Mentorship: Lead a team of 3 5 IAM engineers, providing code reviews, technical guidance, and certification support

Professional & Technical Skills
ForgeRock & CIAM :- Deep knowledge of AM (Access), IDM (Identity), DS (Directory), and IG (Gateway).
Identity & Security :-

1. OAuth 2.0
2. OpenID Connect (OIDC)
3. SAML 2.0
4. JWT, REST APIs
5. LDAP / directory services

Scripting :-

1. Java, JavaScript / Groovy (ForgeRock scripting)
2. API security patterns
3. Linux / Unix environments
4. CI/CD and DevSecOps exposure

Additional functional experience :-

1. ForgeRock Identity Gateway (IG)
2. Cloud platforms (AWS / Azure / GCP)
3. Docker, Kubernetes
4. ForgeRock or IAM certifications
5. Experience with CIAM migrations (Ping, Okta, custom IAM)

Additional Information:
1.Bachelors and above degree in Computer Science, Information Technology, MIS, Engineering / Bachelor or college degree in related field or equivalent work experience (Full time).
2.The candidate should have minimum 5 years of experience in ForgeRock Identity Management & overall 10+ years overall IT experience

Certifications
ForgeRock FRX-AM-CSE Certified

15 years full time education