Senior ForgeRock IAM Engineer

7–10+ years total in IAM, with 4–6+ years hands on across ForgeRock AM and exposure to IDM, IG, and DS/OpenDJ in production, experience in financial instructions are a plus.End to end delivery of SSO, MFA, federation, and API protection using SAML 2.0, OAuth 2.0, and OIDC across enterprise/hybrid environments.Installation, configuraƟon, customization, patching, and upgrades of ForgeRock AM; strong grasp of realms, authentication trees, nodes, sessions, and policies at scale.Policy engineering with RBAC/ABAC, conditional/risk based access, and Zero Trust aligned controls with governance integration.Java and scripting (Bash/Python/Groovy) to build custom nodes, extensions, and automation; Git workflows and CI/CD familiarity.High availability/DR design, performance tuning, capacity planning, monitoring/observability, and incident response for AM in production.Directory Services expertise for identity stores, replication, indexing, and schema in DS/OpenDJ supporting AM sessions and auth data.Federation and token management for B2E/B2C/partner scenarios; secure app onboarding and third party integrations.Integration with security stack (SIEM/PAM), access review processes, and compliance frameworks (audit readiness).Cloud/container experience and gateway paƩerns (IG) and Java / Web Agents protecting microservices and APIs; hybrid deployments. Leadership: leading workstreams, mentoring, stakeholder management, and producing clear design/runbook documentation.Education/certifications: Bachelor’s in CS/IT or equivalent; ForgeRock certifications and relevant IAM / cloud security credentials preferred