Lead ForgeRock Platform Engineer

Job Title: Lead ForgeRock Platform Engineer

Location: San Antonio, TX (Remote)

Duration: 12+ Months Contract

Job Description:

Mandatory Skills:

Identity & Access Management: ForgeRock, PingIdentity, OAuth 2.0

Programming & Frameworks: Python, Go (Golang), Java Spring Boot (facade architecture)

Infrastructure & DevOps: Terraform, Linux server maintenance (VMs), Ansible

Monitoring: Prometheus server build and setup

Desire Skills:

Design, develop, and implement IAM solutions using the ForgeRock suite.

Configure and customize ForgeRock AM, IDM, DS, and Identity Gateway components.

Develop custom authentication modules, journeys, and authorization policies.

Integrate ForgeRock with enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and REST APIs.

Develop and maintain Java-based customizations and extensions for ForgeRock products.

Implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation solutions.

Design and implement user lifecycle management and provisioning workflows.

Troubleshoot and resolve production issues related to authentication, authorization, and identity management.

Collaborate with application teams, security architects, and infrastructure teams for IAM integrations.

Perform platform upgrades, deployments, performance tuning, and security hardening.

Create technical documentation, design documents, and operational procedures.

Follow security best practices and compliance standards.

Required Skills:

ForgeRock Platform Expertise

ForgeRock Access Management (AM)

ForgeRock Identity Management (IDM)

ForgeRock Directory Services (DS)

ForgeRock Identity Gateway (IG)

Authentication Trees/Journeys

Authorization Policies

Intelligent Access

Identity Governance concepts

Java Development

Core Java (Java 8/11/17)

J2EE Technologies

Spring Framework / Spring Boot

RESTful Web Services

Maven, Gradle

JSON, XML

Microservices Architecture

IAM & Security

Single Sign-On (SSO)

Multi-Factor Authentication (MFA)

OAuth 2.0

OpenID Connect (OIDC)

SAML 2.0

LDAP

JWT

PKI and Certificate Management