Role Overview
We are seeking an experienced IAM Architect with deep specialization in the ForgeRock Identity Platform (including PingOne AIC / Ping Identity stack) to lead the strategy, design, and deployment of enterprise-grade access management, governance, and directory solutions. You will translate business requirements into high-scale, secure authentication and identity architectures across cloud, hybrid, and on-premises environments.
Responsibilities:
· Solution Architecture & Strategy: Lead the architectural strategy, reference architecture design, and roadmap planning for enterprise IAM using ForgeRock components.
· ForgeRock Engineering: Design and implement authentication journeys using trees/nodes in ForgeRock AM (Access Management), lifecycle workflows in ForgeRock IDM (Identity Management), dynamic routing in ForgeRock IG (Identity Gateway), and directory schemas in ForgeRock DS (Directory Services / OpenDJ).
· Protocol & Federation Management: Design secure Single Sign-On (SSO), Multi-Factor Authentication (MFA), and OAuth2/OIDC/SAML 2.0 federation across modern and legacy applications.
· Integration & Customization: Develop and review custom nodes, scripts, and extensions in Java, JavaScript, or Groovy to extend platform functionality.
· Cloud & DevOps Alignment: Containerize and deploy ForgeRock solutions using Docker and Kubernetes (K8s) on public cloud infrastructure (AWS, Azure, Google Cloud Platform).
· Stakeholder Engagement: Collaborate with C-suite, Security, and AppDev teams to enforce Zero Trust principles, RBAC/ABAC models, and compliance policies
Required Qualifications & Technical Skills
· ForgeRock AM, IDM, IG, DS (OpenDJ) and/or PingOne Advanced Identity Cloud (AIC).
· OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, UMA, SCIM, LDAP.
Core Java, JavaScript, Groovy, REST APIs, JSON.
· Docker, Kubernetes, Helm charts, CI/CD pipelines, AWS/Azure/Google Cloud Platform deployment.
· 10+ years total in IAM, with 4+ years as a lead architect on large-scale ForgeRock implementations.
Preferred Certifications & Nice-to-Haves
· Certifications: ForgeRock Accredited Access Management / Identity Management Administrator/Architect, CISSP, or CISM.
· Legacy Migration: Proven experience migrating legacy access management solutions (e.g., Oracle Access Manager, CA SiteMinder) to ForgeRock.
· Monitoring & Security: Hands-on experience with SIEM integrations (Splunk, AppDynamics) and CIEM/Zero Trust frameworks
Never miss an opportunity! Create an alert based on the job you applied for.