Forgerock Developer - Remote

We are seeking an experienced Forge Rock Developer to design, build, and support enterprise Identity & Access Management (IAM) solutions using the Forge Rock platform. The role will focus on implementing and customizing Forge Rock Access Management (AM), Identity Management (IDM), and Directory Services (DS) to enable secure authentication, authorization, federation, SSO, and life cycle management across applications and APIs. You will work closely with security architects, application teams, and Dev Ops to deliver scalable, highly available IAM services.

• 8 years of relevant hands‑on experience in Forge Rock/IAM implementations.
• Strong experience with Forge Rock Access Management (AM) including authentication trees/journeys, SSO, policy agents, and authorization policies.
• Strong experience with Forge Rock Identity Management (IDM) including provisioning, reconciliation, workflows, mappings, and connectors.
• Experience with Forge Rock Directory Services (DS/OpenDJ), LDAP concepts, schema, replication, and performance tuning.
• Solid understanding of IAM concepts: identity life cycle, access governance (foundational), RBAC/ABAC, least privilege, and zero trust principles.
• Hands‑on implementation experience with SAML 2.0, OAuth 2.0, OIDC, OpenAM/OpenIDM concepts, JWT, and REST APIs.
• Proficiency in Java and Scripting (JavaScript and/or Groovy); ability to build custom components and integrations.
• Experience with web/application security fundamentals: TLS/certificates, cookies, sessions, OWASP basics, and secure coding practices.
• Working knowledge of Linux, networking basics (DNS, Firewall rules, reverse proxies/load balancers), and troubleshooting in distributed environments.
• Experience with source control and build/deploy tools (Git, Maven/Gradle) and CI/CD pipelines (eg, Jenkins/Azure Dev Ops/Git Lab CI).
• Strong communication skills and ability to work with cross‑functional stakeholders (security, infra, app dev, product).

• Design and implement IAM solutions using Forge Rock AM/IDM/DS to meet security, performance, and availability requirements.
• Develop and customize authentication trees/journeys, authorization policies, SSO, adaptive/risk-based authentication, and session management.
• Implement federation and standards-based integrations: SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), and JWT.
• Build and maintain IDM workflows, mappings, managed objects, connectors, and provisioning/de‑provisioning processes.
• Develop scripts and extensions (Java/JavaScript/Groovy as applicable) for custom nodes, REST endpoints, event handlers, and integrations.
• Integrate Forge Rock with external systems such as HR sources, directories, databases, MFA providers, and cloud services.
• Configure and tune Forge Rock Directory Services (LDAP), including schema design, replication, indexing, and access control.
• Establish CI/CD pipelines and automation for Forge Rock deployments; support containerization and infrastructure‑as‑code practices.
• Perform troubleshooting and root‑cause analysis across IAM flows, logs, and infrastructure; implement fixes and preventive controls.
• Collaborate with security and compliance teams to meet audit requirements, implement secure coding practices, and manage secrets/certificates.
• Create technical documentation: solution designs, runbooks, deployment guides, and operational procedures.
• Mentor junior developers and contribute to best practices, code reviews, and platform governance.

• Experience with Forge Rock Identity Gateway (IG) and API protection patterns.
• Experience deploying Forge Rock in cloud/hybrid environments (AWS/Azure/GCP) including HA/DR design.
• Containerization and orchestration experience (Docker, Kubernetes/Open Shift).
• Infrastructure as Code (Terraform/Ansible) and automated configuration management.
• Experience integrating with MFA providers (eg, RSA, Duo, Azure MFA) and risk engines.
• Monitoring and observability:
  Splunk/ELK, Prometheus/Grafana, App Dynamics/Dynatrace.
• Exposure to access governance tools (IGA) and identity standards (SCIM).
• Forge Rock certifications (eg, AM/IDM/DS) or equivalent IAM certifications.