Lead ForgeRock Platform Engineer

Lead Forge Rock Platform Engineer

Location:

San Antonio, TX (Remote)

Mandatory

Skills:

• Identity & Access Management:
  Forge Rock, Ping Identity, OAuth 2.0
• Programming & Frameworks:
  Python, Go (Golang), Java Spring Boot (facade architecture)
• Infrastructure & Dev Ops:
  Terraform, Linux server maintenance (VMs), Ansible
• Monitoring:
  Prometheus server build and setup

The selected candidate will be responsible for platform administration, server maintenance, deployments, automation, monitoring, and operational support. Therefore, Dev Ops skills are a core requirement and cannot be compromised. Experience with Java is desirable but should be treated as a nice-to-have skill rather than a mandatory one

Job Description

• Design, develop, and implement IAM solutions using the Forge Rock suite.
• Configure and customize Forge Rock AM, IDM, DS, and Identity Gateway components.
• Develop custom authentication modules, journeys, and authorization policies.
• Integrate Forge Rock with enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and REST APIs.
• Develop and maintain Java-based customizations and extensions for Forge Rock products.
• Implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation solutions.
• Design and implement user lifecycle management and provisioning workflows.
• Troubleshoot and resolve production issues related to authentication, authorization, and identity management.
• Collaborate with application teams, security architects, and infrastructure teams for IAM integrations.
• Perform platform upgrades, deployments, performance tuning, and security hardening.
• Create technical documentation, design documents, and operational procedures.
• Follow security best practices and compliance standards.

Required Skills Forge Rock Platform Expertise

• Forge Rock Access Management (AM)
• Forge Rock Identity Management (IDM)
• Forge Rock Directory Services (DS)
• Forge Rock Identity Gateway (IG)
• Authentication Trees/Journeys
• Authorization Policies
• Intelligent Access
• Identity Governance concepts

Java Development

• Core Java (Java 8/11/17)
• J2EE Technologies
• Spring Framework / Spring Boot
• RESTful Web Services
• Maven, Gradle
• JSON, XML
• Microservices Architecture

IAM & Security

• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• OAuth 2.0
• OpenID Connect (OIDC)
• SAML 2.0
• LDAP
• JWT
• PKI and Certificate Management