Job ID: 3179840
Role Overview:
We are actively seeking a highly skilled and experienced Senior ForgeRock & Java Engineer to join our dynamic team. This pivotal role involves the comprehensive design, development, and implementation of enterprise-grade Identity and Access Management (IAM) solutions. The ideal candidate will possess deep expertise across the entire ForgeRock stack, including Access Management (AM), Directory Services (DS), and Identity Gateway (IG). A strong background in Java development is essential, as you will be responsible for building custom authentication nodes, scripts, and plugins to extend and enhance the ForgeRock ecosystem. This is a critical opportunity for an individual who thrives in complex security environments, is passionate about building robust, scalable, and secure IAM infrastructures, and can contribute significantly to our security posture.
Key Responsibilities:
- Policy Engineering: Design, implement, and meticulously manage complex Authentication Trees and Authorization Policies within ForgeRock Access Management (AM). This includes defining intricate access rules, configuring multi-factor authentication (MFA) flows, and establishing seamless single sign-on (SSO) configurations to meet stringent security, compliance, and user experience requirements.
- Gateway Integration: Configure, deploy, and manage ForgeRock Identity Gateway (IG) to protect a wide array of APIs and web applications. This involves leveraging built-in filters, handlers, and developing custom Java extensions to enforce granular security policies, perform robust token validation, and ensure secure communication between various services and applications.
- Directory Management: Optimize, maintain, and troubleshoot ForgeRock Directory Services (DS) instances. Ensure high availability, data consistency, and secure LDAP configurations. This encompasses schema extensions, replication management, performance tuning, capacity planning, and developing disaster recovery strategies for critical identity data stores.
- Custom Development: Write high-quality, production-ready Java code to develop custom Authentication Nodes, Post-Authentication Modules, and specialized scripts tailored specifically for the ForgeRock ecosystem. This requires a deep understanding of ForgeRock APIs, SDKs, and best practices for extending its core functionalities to meet unique business needs.
- Security Enforcement: Implement and enforce modern security protocols including OAuth2, OpenID Connect (OIDC), and SAML 2.0. Ensure seamless and secure user journeys across various applications and services, adhering strictly to industry standards and best practices for identity federation, authorization, and secure API access.
- Collaboration & Mentorship: Work closely with cross-functional teams, including security architects, application developers, and operations teams, to integrate IAM solutions effectively. Provide expert guidance on identity-related challenges, participate actively in code reviews, contribute to architectural discussions, and help shape the overall technical direction of the IAM platform. Mentor junior team members and foster a culture of continuous learning and improvement.
- Documentation & Best Practices: Create and maintain comprehensive documentation for all IAM solutions, including detailed design specifications, deployment guides, operational procedures, and troubleshooting runbooks. Ensure that all implementations adhere to security best practices and organizational standards.
Required Skills & Experience:
- Deep and proven expertise in the entire ForgeRock IAM stack, including ForgeRock Access Management (AM), ForgeRock Directory Services (DS), and ForgeRock Identity Gateway (IG).
- Strong proficiency in Java coding and development, with demonstrated experience in building custom components, extensions, and integrations for enterprise applications, particularly within the ForgeRock environment.
- Solid understanding and practical experience with Agile development methodologies, including active participation in daily scrums, weekly iteration reviews, and planning sessions.
- Familiarity with DevOps practices, including experience with CI/CD pipelines for automated deployment, testing, and release management of IAM solutions.
- Experience with modern security protocols such as OAuth2, OIDC, and SAML 2.0.
- Knowledge of LDAP, REST APIs, and web services.
- Excellent problem-solving, analytical, and critical thinking skills, with the ability to diagnose and resolve complex technical issues.
- Strong communication skills, both written and verbal, with the ability to articulate complex technical concepts to both technical and non-technical stakeholders.
- Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.
- Experience with cloud platforms (AWS, Azure, GCP) and containerization technologies (Docker, Kubernetes) is a significant plus.
Why Join Us?
This is an exciting opportunity to work on cutting-edge identity and access management technologies within a challenging and rewarding environment. You will play a key role in securing our enterprise applications and data, contributing directly to the success and security of our organization. We offer a collaborative work environment, opportunities for professional growth, and the chance to make a real impact.
Compensation & Location
Salary: $130,000 – $180,000 per year (Estimated)
Location: New York, NY
Recruiter / Company – Contact Information
Email: muralikaizon@gmail.com
Recruiter Notice:
To remove this job posting, please send an email from
muralikaizon@gmail.com with the subject:
DELETE_3179840