Lead IAM Architect-ForgeRock

Lead IAM Architect (ForgeRock Access Management)

REMOTE

6 months

Position Overview

The client is seeking a highly experienced Lead IAM Architect to provide technical leadership for complex Identity and Access Management (IAM) environments. This role is ideal for a hands-on architect with deep ForgeRock Access Management expertise who can bridge architecture, engineering, and operations while driving stabilization, modernization, and long-term IAM strategy.

The successful candidate will partner closely with IAM leadership, engineering teams, and platform stakeholders to identify performance bottlenecks, lead root cause analysis efforts, and develop architectural roadmaps that support enterprise-scale identity services.

Key Responsibilities

• Serve as the lead technical architect for enterprise IAM initiatives and platform optimization efforts.
• Own the end-to-end technical architecture across identity ecosystems, including authentication services, directories, load balancers, and application integrations.
• Lead root cause analysis investigations and deliver actionable findings supported by data and technical evidence.
• Partner with IAM, infrastructure, security, and engineering teams to troubleshoot performance, scalability, and availability issues.
• Develop architecture documentation, technical recommendations, and executive-ready communications.
• Create strategic roadmaps for IAM platform consolidation and modernization initiatives.
• Evaluate cross-platform identity integrations and provide guidance on future-state architecture.
• Ensure all changes align with established governance, change management, and operational processes.

Required Qualifications

• 10+ years of Identity and Access Management experience with progressive architecture responsibilities.
• Deep expertise with ForgeRock Access Management (AM) in enterprise-scale deployments.
• Strong understanding of:
• Session management and affinity behavior
• Stateful versus stateless architectures
• AM-to-directory connection pooling and timeout management
• Multi-instance and highly available AM environments
• Proven ability to trace authentication and authorization transactions end-to-end across:
• Applications
• Load balancers
• ForgeRock AM
• Directory services
• Active Directory and Azure Active Directory
• Demonstrated experience identifying and resolving latency and performance issues within IAM ecosystems.
• Strong technical writing skills with a track record of delivering architecture documentation, root cause analyses, and executive-level recommendations.
• Experience working within established governance and change management frameworks.

Preferred Qualifications

• Experience leading IAM consolidation and modernization initiatives.
• Familiarity with SailPoint Identity Security Cloud or IdentityIQ.
• Knowledge of Keycloak and modern identity federation technologies.
• Understanding of API architecture, orchestration platforms, and identity service integration patterns.
• Experience supporting large-scale enterprise authentication platforms.

Desired Soft Skills

• Proven ability to build trust and credibility with technical teams during critical platform stabilization efforts.
• Strong collaboration and stakeholder management skills.
• Excellent communication and presentation capabilities.
• Ability to influence decisions through technical analysis and evidence-based recommendations.
• Commitment to knowledge sharing and cross-functional teamwork.

Thanks,

Vinod.