Lead Identity Engineer - ForgeRock Developer

About the Role : We are seeking a highly skilled and experienced Lead Identity Engineer with deep expertise in the ForgeRock Identity Platform to join our team.

The ideal candidate will be a technical leader, capable of designing, implementing, and optimizing complex Identity and Access Management (IAM) solutions.

This role requires strong hands-on technical abilities, excellent communication skills, and the capacity to mentor junior resources.

What You’ll Do :   Mentor and assist in the development of external professional services (PS) delivery resources, fostering technical growth and best practices.

• Provide advanced deployment assistance and troubleshooting support to the operations team for critical IAM issues.
• Collaborate with Sales and Pre-Sales teams by providing expert delivery and implementation guidance for prospective and current clients.
• Develop and maintain valuable resources for supporting delivery engagements, including report templates, delivery guides, and technical documentation.
• Design, install, and configure connectors to various destination targets, ensuring robust connection to authorized sources and precise definition of User Attributes.
• Develop and configure User, Process, and Resource definition forms within the ForgeRock platform.
• Possess strong hands-on experience with customization of ForgeRock components, including but not limited to connector development, writing scripts (e.g., JavaScript, Groovy), and building complex workflows.
• Demonstrate strong knowledge of directory services, including OpenDJ, OpenLDAP, Microsoft Active Directory, and their integration with IAM solutions.
• Work independently as a Senior Developer / Consultant, with the potential to lead a small team responsible for integrating IAM solutions with surrounding enterprise systems.
• Collaborate effectively with offshore team members, ensuring seamless communication and project progress across different time zones.
• Implement comprehensive Single Sign-On (SSO) solutions based on OpenAM (ForgeRock Access Management) to support B2B and B2C portals, leveraging identity and access management technologies.
• Integrate OpenAM with various backend technologies, including OpenDJ, Microsoft Active Directory, and relational databases (RDBMS).
• Possess knowledge of RDBMS clustering technologies and configurations with various commercial software (e.g., MySQL, Oracle DB, MS SQL Server).
• Responsible for ensuring appropriate security controls are established and functioning as expected, including data encryption standards and authentication mechanisms are robust and effective.
• Manage the migration of code and configurations through various environments, from development to staging and production.

Ensure technical delivery consistently aligns with client specifications and adhere to applicable technical standards by working closely with client counterparts.

Demonstrate strong Unix / Linux skills, including proficiency in scripting (e.g., Shell, Python) and automation experience.

What You Bring : Hands-on experience on end-to-end implementation of Access Management using ForgeRock Cloud / PingOne Advanced Identity Cloud / CA SiteMinder.

Completed at least 2-3 implementations (hands-on)preferably on ForgeRock cloud or P1AC.

Working experience on Integrating 3rd party apps to CA SiteMinder / ForgeRock / Ping Identity for SSO.

Working experience on Integrating on-premise deployed(Proxy / Agent) apps to ForgeRock / Ping Cloud for SSO.

Working knowledge of federation protocols like SAML2.0, OAuth, OIDC, WS-Fed.

Working Knowledge of Ping Products like PingOne Advanced Cloud, Ping Access, and PingOne Protect.

Must have Knowledge of Kerberos, Realm-based authentication, and IWA authentication schemes.

Knowledge of Layer-7 web services routing and security.

Working knowledge of SCIM provisioning.

Working knowledge of different MFA tools and methodologies.

Experience with troubleshooting HTTP and web applications is a must.

Working knowledge of HTML / CSS template design / update is required.

Must know CI / CD process and access management dev-ops deployment model.

Must know Cloud platforms like AWS, and Azure, and knowledge of Cloud Infra features like ALB, NLB...

etc.

Knowledge of configuring web agents and policies, reverse proxy agents, and various types of federation partnerships.

Strong experience in automation and scripting like PowerShell, Python, Shell scripting, etc.

Worked in client client-facing role for access management implementation with different AM products.

Knowledge of applicable audit controls and applicability to IAM services architecture, design, and processes.

Should be able to collaborate with cross-functional teams and understand customer needs to deliver the best-suited solution.  Should be able to Investigate issues and conduct root cause analysis to solve a variety of problems in his / her area of work.

Should be able to communicate, fluently, and in an assertive manner, and present ideas effectively.

About Simeio and What We Do Simeio has over 650 talented employees across the globe.

We have offices in USA (Atlanta HQ and Texas), India, Canada, Costa Rica and UK.

Founded in 2007, and now backed by private equity company ZMC, Simeio is recognized as a top IAM provider by industry analysts.

Alongside Simeio’s identity orchestration tool ‘Simeio IO’ - Simeio also partners with industry leading IAM software vendors to provide access management, identity governance and administration, privileged access management and risk intelligence services across on-premise, cloud, and hybrid technology environments.

Simeio provides services to numerous Fortune 1000 companies across all industries including financial services, technology, healthcare, media, retail, public sector, utilities and education.

Diversity & Inclusion Simeio is an equal opportunity employer.

If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to our recruitment team - recruitment@simeio.com .

Thank you About Your Application We carefully review every application we receive.

If your skills and experience match our needs, we’ll be in touch.

If you don’t hear from us within 10 days, please don’t be discouraged—we may retain your application for future opportunities.

We also encourage you to check our careers page for other openings   Simeio is an equal opportunity employer.

If you require assistance with completing this application, interviewing, completing any pre-employment testing, or otherwise participating in the employee selection process, please direct your inquiries to any of the recruitment team at recruitment@simeio.com or +1 404-882-3700.

Powered by JazzHR