ForgeRock IAM Developer/Engineer

Introduction:

As a ForgeRock IAM Developer/Engineer, you will be responsible for designing, implementing, and supporting solutions across the ForgeRock Identity Platform. This includes working with ForgeRock AM, IDM, DS, IG, and potentially Identity Cloud/Autonomous Identity. Your expertise in IAM standards and protocols, Java development, and operating ForgeRock in enterprise environments will be crucial in ensuring the security and efficiency of our IAM systems.

Responsibilities:

• Design, implement, and support solutions across the ForgeRock Identity Platform, including AM, IDM, DS, IG, and potentially Identity Cloud/Autonomous Identity.
• Build custom extensions and integrations using Java, scripting, and REST APIs.
• Implement federation and API security patterns using OAuth2/OIDC, SAML2, JWT, and secure token/session management.
• Support CI/CD, environment promotion, and configuration management.
• Troubleshoot complex IAM issues across applications, gateways, directories, and federation partners.

Requirements:

Required Qualifications:

• Hands-on experience across ForgeRock Identity Platform / ForgeRock Suite, including AM, IDM, DS, and IG.
• Strong IAM knowledge: SSO, federation, MFA, authorization (RBAC/ABAC), identity lifecycle, provisioning, access policies, session/token management.
• Strong Java development background.
• Strong understanding and hands-on use of IAM standards/protocols: OAuth 2.0 / OpenID Connect (OIDC), SAML 2.0, SCIM, JWT, TLS/mTLS.
• Solid experience with directories/identity stores: LDAP, Active Directory, schema/attributes/groups, replication considerations, performance and troubleshooting.
• Experience with operating ForgeRock in enterprise environments: Logging, monitoring, performance troubleshooting, high availability, and production support.

Preferred Skills:

• Experience with Identity Cloud/Autonomous Identity.
• Knowledge of RBAC, SaaS, and API security.