Overview
Support, maintain and enhance enterprise Identity and Access Management (IAM) platforms, ensuring high availability, performance, security and operational stability across on-premises and AWS environments.
What you'll do
- Support and maintain ForgeRock (AM, IDM, DS, Identity Cloud), PingFederate, P1AIC, and P1AIC IGA platforms.
- Monitor IAM services, troubleshoot production incidents, perform root cause analysis (RCA), and drive platform reliability improvements.
- Manage authentication, Single Sign-On (SSO), federation, MFA, provisioning and identity lifecycle processes.
- Support and enhance IAM-integrated applications built on ASP.NET Console Applications, .NET APIs, TIBCO BW and AngularJS.
- Collaborate with infrastructure, security and application teams to resolve production issues.
- Implement monitoring, automation, patching, vulnerability remediation and operational best practices.
- Maintain technical documentation, operational runbooks, and support audit/compliance requirements.
- Participate in incident bridges and lead recovery efforts during production incidents.
- Support cloud-based IAM integrations and services within AWS environments.
- Ensure continuous improvement, stability, availability and security of enterprise IAM services.
What you'll need
- 5+ years of IAM support and engineering experience.
- Hands-on expertise with ForgeRock, PingFederate, ForgeRock Identity Cloud, and ForgeRock Identity Governance solutions.
- Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, Active Directory and MFA.
- Experience with C#, ASP.NET, .NET APIs, TIBCO BW, AngularJS, SQL databases, PostgreSQL and Python.
- Experience navigating and troubleshooting AWS services, including Lambda, Glue, CloudWatch, IAM, and related infrastructure components.
- Hands-on experience using Splunk and Dynatrace for monitoring and troubleshooting.
- Strong troubleshooting, incident management and production support skills.
- Minimum 3 years of experience with ForgeRock Identity Cloud configuration and development.
- Minimum 5 years of experience implementing and supporting SSO solutions using SAML and OAuth.
- Working experience with Java and PingFederate.
Nice to have
- Expertise in developing authentication journeys, self-service workflows and access management solutions.
- Strong understanding of OpenID Connect (OIDC) and OAuth 2.0 standards and best practices.
- Working knowledge of DevOps tools and practices, including GitHub and Octopus Deploy.
- Experience with automation, scripting and operational efficiency initiatives.
Details
Read the full description and apply on the company’s own careers page.