Senior iAM Consultant - ForgeRock

Job description

We are seeking a highly skilled and experienced Senior IAM Consultant with deep expertise in the ForgeRock Identity Platform, including both legacy ForgeRock environments and modern cloud-native deployments. The ideal candidate will have strong hands-on experience across ForgeRock AM (Access Management), IDM (Identity Management), IG (Identity Gateway) and DS (Directory Services), along with expertise in containerized deployment using Kubernetes, Docker and cloud platforms such as AWS. This role involves working on complex global client engagements, driving technical delivery, and contributing to solution design and best develop and implement IAM solutions using ForgeRock Identity Platform including AM, IDM, IG and DS components.

Work on both Legacy ForgeRock deployments and modern Kubernetes/Docker-based environments.

Develop custom authentication trees, scripts and journeys using ForgeRock AM.

Configure and customise ForgeRock IDM connectors, workflows, mappings and synchronisation policies.

Implement ForgeRock Identity Gateway (IG) for API security, single sign-on and policy enforcement.

Manage and tune ForgeRock Directory Services (DS) for high-availability and performance.

Deploy and manage ForgeRock Identity Platform in containerised environments using Kubernetes (EKS/GKE/AKS) and Docker.

Work with Helm charts, Kubernetes operators and ForgeRock's CDK (Cloud Deployment Kit) for platform deployments.

Integrate ForgeRock solutions with AWS services including IAM, Secrets Manager, S3, RDS and CloudWatch.

Implement CI/CD pipelines for automated deployment of ForgeRock configurations and updates.

Manage infrastructure-as-code (IaC) using tools such as Terraform or CloudFormation for ForgeRock environments.

Implement and troubleshoot OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, SCIM and REST API integrations.

Integrate ForgeRock with enterprise applications, LDAP directories, Active Directory and cloud services.

Implement Multi-Factor Authentication (MFA), Adaptive Risk-Based Authentication and Passwordless solutions.

Configure Single Sign-On (SSO) and federation across multiple identity domains.

Work directly with global clients to understand business requirements and translate them into technical IAM solutions.

Conduct technical workshops, solution design sessions and architecture reviews with client stakeholders.

Prepare and maintain technical documentation solution architecture, configuration guides, HLD/LLD documents.

Provide technical guidance and mentorship to junior consultants on the team.

Participate in pre-sales activities, including effort estimation, proposal preparation and client presentations

Skills Required:

Excellent communication skills, ability to explain complex technical concepts to both technical and non-technical stakeholders.

Strong analytical and problem-solving ability with a structured approach to troubleshooting.

Ability to manage multiple priorities in a fast-paced, client-driven environment.

Team player with a collaborative mindset and willingness to mentor junior team members.

Self-driven, detail-oriented and committed to delivering high-quality outcomes.

Role: IT & Information Security - Other

Industry Type: IT Services & Consulting

Department: IT & Information Security

Employment Type: Full Time, Permanent

Role Category: IT & Information Security - Other

(ref:hirist.tech)