ForgeRock IAM Engineer
Listed on 2026-07-01
-
IT/Tech
Cybersecurity, Systems Engineer
Forge Rock Engineer
The Forge Rock Engineer will design, configure, and support Forge Rock within a complex workforce IAM environment. The role is critical for enabling federation with Microsoft Entra , supporting legacy and modern application authentication, and enabling a phased migration toward Entra the single workforce entry point.
Key Responsibilities:
- Engineer and support Forge Rock Access Management (AM) for workforce authentication.
- Configure and manage authentication flows, federation, and application integrations.
- Implement and support Forge Rock ↔ Microsoft Entra (POC and production).
- Support integrations with RSA, ADFS, and legacy identity systems.
- Assess applications tightly integrated with Forge Rock and define migration or coexistence strategies.
- Troubleshoot complex SSO, federation, and authentication issues.
- Support remediation of legacy or non standard authentication patterns.
Mandatory
Skills & Experience:
- Strong hands on experience with Forge Rock AM (authentication trees, federation, access policies).
- Deep understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC).
- Experience integrating Forge Rock with Microsoft Entra / Azure AD.
- Experience in multi IDP enterprise environments.
- Strong troubleshooting skills across authentication, claims, certificates, and federation flows.
Preferred Experience:
- Experience supporting Identity Provider consolidation programs.
- Familiarity with MFA integration and authentication hardening.
- Experience working with applications that do not support SAML/OIDC.
Diverse Lynx LLC is an Equal Employment Opportunity employer. All qualified applicants will receive due consideration for employment without any discrimination. All applicants will be evaluated solely on the basis of their ability, competence and their proven capability to perform the functions outlined in the corresponding role. We promote and support a diverse workforce across all levels in the company.
(If this job is in fact in your jurisdiction, then you may be using a Proxy or VPN to access this site, and to progress further, you should change your connectivity to another mobile device or PC).