ForgeRock Developer - urgent - remote

ForgeRock Developer - urgent - remote - 3 months rolling

Role Summary

We are seeking an experienced ForgeRock Developer to design, build, and support enterprise Identity & Access Management (IAM) solutions using the ForgeRock platform. The role will focus on implementing and customizing ForgeRock Access Management (AM), Identity Management (IDM), and Directory Services (DS) to enable secure authentication, authorization, federation, SSO, and life cycle management across applications and APIs. You will work closely with security architects, application teams, and DevOps to deliver scalable, highly available IAM services.

Required Skills & Experience

• 8 years of relevant hands-on experience in ForgeRock/IAM implementations.
• Strong experience with ForgeRock Access Management (AM) including authentication trees/journeys, SSO, policy agents, and authorization policies.
• Strong experience with ForgeRock Identity Management (IDM) including provisioning, reconciliation, workflows, mappings, and connectors.
• Experience with ForgeRock Directory Services (DS/OpenDJ), LDAP concepts, schema, replication, and performance tuning.
• Solid understanding of IAM concepts: identity life cycle, access governance (foundational), RBAC/ABAC, least privilege, and zero trust principles.
• Hands-on implementation experience with SAML 2.0, OAuth 2.0, OIDC, OpenAM/OpenIDM concepts, JWT, and REST APIs.
• Proficiency in Java and Scripting (JavaScript and/or Groovy); ability to build custom components and integrations.
• Experience with web/application security fundamentals: TLS/certificates, cookies, sessions, OWASP basics, and secure coding practices.
• Working knowledge of Linux, networking basics (DNS, Firewall rules, reverse proxies/load balancers), and troubleshooting in distributed environments.
• Experience with source control and build/deploy tools (Git, Maven/Gradle) and CI/CD pipelines (eg, Jenkins/Azure DevOps/GitLab CI).
• Strong communication skills and ability to work with cross-functional stakeholders (security, infra, app dev, product).

Key Responsibilities

• Design and implement I AM solutions using ForgeRock AM/IDM/DS to meet security, performance, and availability requirements.
• Develop and customize authentication trees/journeys, authorization policies, SSO, adaptive/risk-based authentication, and session management.
• Implement federation and standards-based integrations: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and JWT.
• Build and maintain IDM workflows, mappings, managed objects, connectors, and provisioning/de-provisioning processes.
• Develop scripts and extensions (Java/JavaScript/Groovy as applicable) for custom nodes, REST endpoints, event handlers, and integrations.
• Integrate ForgeRock with external systems such as HR sources, directories, databases, MFA providers, and cloud services.
• Configure and tune ForgeRock Directory Services (LDAP), including schema design, replication, indexing, and access control.
• Establish CI/CD pipelines and automation for ForgeRock deployments; support containerization and infrastructure-as-code practices.
• Perform troubleshooting and root-cause analysis across IAM flows, logs, and infrastructure; implement fixes and preventive controls.
• Collaborate with security and compliance teams to meet audit requirements, implement secure coding practices, and manage secrets/certificates.
• Create technical documentation: solution designs, runbooks, deployment guides, and operational procedures.
• Mentor junior developers and contribute to best practices, code reviews, and platform governance.

Preferred/Good-to-Have

• Experience with ForgeRock Identity Gateway (IG) and API protection patterns.
• Experience deploying ForgeRock in cloud/hybrid environments (AWS/Azure/GCP) including HA/DR design.
• Containerization and orchestration experience (Docker, Kubernetes/OpenShift).
• Infrastructure as Code (Terraform/Ansible) and automated configuration management.
• Experience integrating with MFA providers (eg, RSA, Duo, Azure MFA) and risk engines.
• Monitoring and observability: Splunk/ELK, Prometheus/Grafana, AppDynamics/Dynatrace.
• Exposure to access governance tools (IGA) and identity standards (SCIM).
• ForgeRock certifications (eg, AM/IDM/DS) or equivalent IAM certifications.