Lead ForgeRock Platform Engineer

Role: Lead ForgeRock Platform Engineer

Location: San Antonio, TX/Remote

Comment:- This requirement is specifically for ForgeRock Platform Engineers, not a ForgeRock developer. The selected candidate will be responsible for platform administration, server maintenance, deployments, automation, monitoring, and operational support. Therefore, DevOps skills are a core requirement and cannot be compromised. Experience with Java is desirable but should be treated as a nice-to-have skill rather than a mandatory one.

Mandatory Skills:

• Identity & Access Management: ForgeRock, PingIdentity, OAuth 2.0
• Programming & Frameworks: Python, Go (Golang), Java Spring Boot (facade architecture)
• Infrastructure & DevOps: Terraform, Linux server maintenance (VMs), Ansible
• Monitoring: Prometheus server build and setup

Job Description

• Design, develop, and implement IAM solutions using the ForgeRock suite.
• Configure and customize ForgeRock AM, IDM, DS, and Identity Gateway components.
• Develop custom authentication modules, journeys, and authorization policies.
• Integrate ForgeRock with enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and REST APIs.
• Develop and maintain Java-based customizations and extensions for ForgeRock products.
• Implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation solutions.
• Design and implement user lifecycle management and provisioning workflows.
• Troubleshoot and resolve production issues related to authentication, authorization, and identity management.
• Collaborate with application teams, security architects, and infrastructure teams for IAM integrations.
• Perform platform upgrades, deployments, performance tuning, and security hardening.
• Create technical documentation, design documents, and operational procedures.
• Follow security best practices and compliance standards.
• Required Skills
• ForgeRock Platform Expertise
• ForgeRock Access Management (AM)
• ForgeRock Identity Management (IDM)
• ForgeRock Directory Services (DS)
• ForgeRock Identity Gateway (IG)
• Authentication Trees/Journeys
• Authorization Policies
• Intelligent Access
• Identity Governance concepts
• Java Development
• Core Java (Java 8/11/17)
• J2EE Technologies
• Spring Framework / Spring Boot
• RESTful Web Services
• Maven, Gradle
• JSON, XML
• Microservices Architecture
• IAM & Security
• Single Sign-On (SSO)
• Multi-Factor Authentication (MFA)
• OAuth 2.0
• OpenID Connect (OIDC)
• SAML 2.0
• LDAP
• JWT
• PKI and Certificate Management