ForgeRock Developer

ForgeRock Developer

Experience: 6+ Years

Location: Remote

Role: ForgeRock Developer / IAM Developer Job Summary We are looking for an experienced

ForgeRock Developer with 8+ years of hands-on experience in Identity and Access Management (IAM) and strong expertise in the

ForgeRock Identity Platform . The ideal candidate will have strong development and implementation experience across

ForgeRock Access Management (AM), Identity Management (IDM), Directory Services (DS), and Identity Gateway (IG) . The candidate should be proficient in developing customized authentication journeys, identity lifecycle workflows, integrations, APIs, and secure authentication solutions. The role requires strong experience with

OAuth 2.0, OpenID Connect, SAML, REST APIs, LDAP, Java, JavaScript, and API security , along with the ability to troubleshoot and support enterprise ForgeRock environments. Key Responsibilities ForgeRock Development

• Design, develop, configure, customize, and implement

ForgeRock AM, IDM, DS, and IG solutions.

• Develop and customize

ForgeRock authentication journeys and trees based on business and security requirements.

• Develop custom authentication nodes and authentication mechanisms.
• Create custom scripts using

JavaScript and ForgeRock scripting capabilities.

• Configure authentication, authorization, session management, SSO, MFA, and adaptive authentication.
• Develop custom ForgeRock integrations with enterprise applications and identity systems.
• Implement identity lifecycle management and automated provisioning/de-provisioning.
• Develop and configure ForgeRock IDM managed objects, mappings, workflows, reconciliation, and synchronization.
• Develop and maintain custom connectors and integrations.
• Configure ForgeRock Identity Gateway for secure application and API access. ForgeRock Access Management – AM
• Strong hands-on experience with

ForgeRock AM configuration and development.

• Design and implement authentication trees/journeys.
• Configure SSO and federation solutions.
• Implement OAuth 2.0 and OpenID Connect-based authentication.
• Configure SAML 2.0 federation with external Identity Providers and Service Providers.
• Implement MFA and step-up authentication.
• Develop custom authentication nodes and scripts.
• Configure authorization policies and access controls.
• Troubleshoot authentication, token, session, and federation issues.
• Implement secure token issuance, validation, and management. ForgeRock Identity Management – IDM
• Develop and configure

ForgeRock IDM solutions for identity lifecycle management.

• Configure provisioning and de-provisioning workflows.
• Develop reconciliation and synchronization processes.
• Configure mappings between source and target systems.
• Develop custom scripts and workflow logic.
• Integrate IDM with Active Directory, LDAP, databases, HR systems, and REST APIs.
• Troubleshoot provisioning and synchronization failures.
• Implement Joiner-Mover-Leaver (JML) identity lifecycle processes. ForgeRock Directory Services – DS
• Strong experience with

ForgeRock Directory Services (DS) .

• Configure and manage LDAP directories.
• Work with LDAP schemas, indexes, replication, access controls, and directory data.
• Develop LDAP queries and troubleshoot directory-related issues.
• Configure high availability and replication.
• Troubleshoot performance, connectivity, authentication, and synchronization issues.
• Integrate DS with ForgeRock AM and IDM. ForgeRock Identity Gateway – IG
• Configure and develop solutions using

ForgeRock IG .

• Implement reverse proxy and gateway-based authentication.
• Protect applications and APIs using ForgeRock IG.
• Configure routing, authentication, authorization, and policy enforcement.
• Implement OAuth 2.0 and OpenID Connect integrations.
• Develop custom gateway scripts and filters.
• Troubleshoot API gateway and application integration issues. API & Integration Development
• Develop and consume

REST APIs for IAM integrations.

• Integrate ForgeRock with enterprise applications, microservices, directories, and cloud platforms.
• Implement secure API authentication and authorization.
• Strong understanding of:
• OAuth 2.0
• OpenID Connect
• SAML 2.0
• JWT
• REST
• JSON
• XML
• HTTP/HTTPS
• Integrate ForgeRock with

Active Directory, LDAP, databases, HR systems, and third-party applications .

• Troubleshoot API, authentication, authorization, and token-related issues. Programming & Scripting
• Strong programming experience with

Core Java .

• Strong hands-on experience with

JavaScript .

• Experience developing custom ForgeRock scripts and extensions.
• Experience with REST API development and integration.
• Experience with JSON and XML processing.
• PowerShell scripting experience is desirable.
• Ability to analyze and troubleshoot application and integration code. Security & Authentication
• Strong understanding of IAM and modern authentication concepts.
• Hands-on experience with:
• OAuth 2.0
• OpenID Connect
• SAML 2.0
• JWT
• MFA
• FIDO2
• WebAuthn
• Experience implementing secure authentication and authorization mechanisms.
• Knowledge of federation, SSO, token management, and access policies.
• Understanding of identity security and enterprise IAM best practices. Cloud & DevOps
• Experience deploying or supporting ForgeRock solutions on

AWS and/or Azure .

• Experience integrating ForgeRock with

Microsoft Entra ID .

• Experience with Docker and containerized deployments.
• Knowledge of Kubernetes is desirable.
• Experience with CI/CD pipelines and automated deployments.
• Experience with

GitHub Actions or similar CI/CD tools.

• Strong understanding of Git and source-control practices. Production Support & Troubleshooting
• Monitor ForgeRock environments for performance, availability, and errors.
• Troubleshoot issues across

AM, IDM, DS, and IG .

• Analyze ForgeRock logs, audit logs, JVM logs, LDAP logs, and API responses.
• Perform root-cause analysis for authentication, provisioning, federation, and integration issues.
• Troubleshoot authentication journeys, scripts, connectors, APIs, and directory services.
• Support production deployments, patches, upgrades, and configuration changes.
• Participate in incident, problem, and change management activities.
• Create technical documentation, deployment guides, troubleshooting guides, and runbooks.