Security Architect

Project Role : Security Architect

Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : ForgeRock Identity Management

Good to have skills : ForgeRock Access Management

Minimum 5 Year(s) Of Experience Is Required Educational Qualification : 15 years full time education

Summary As a Lead ForgeRock Engineer, you will serve as the Subject Matter Expert (SME) for our global Identity and Access Management platform. You will be responsible for the a high-level orchestration, and security governance of the ForgeRock stack (AM, IDM, DS, IG). You will bridge the gap between business requirements and technical execution, leading a team of junior and mid-level administrators Key Responsibilities

• Platform Administration & Health Maintenance: Perform system upgrades, patches, and version migrations for PingAM, PingIDM, and PingDS. Monitoring: Use tools like Splunk, ELK, or Prometheus to monitor system health, log rotation, and performance bottlenecks. Directory Management: Manage LDAP schemas, indexes, and replication in Directory Services (DS) to ensure data consistency.
• Identity Lifecycle & Integration App Onboarding: Configure SAML 2.0, OIDC, and OAuth2 integrations to enable Single Sign-On (SSO) for new applications. Provisioning: Build and manage reconciliation/sync jobs in IDM to automate user onboarding and offboarding from HR systems (like Workday) to Active Directory. Policy Enforcement: Create and maintain authorization policies and Authentication Trees (Journeys) to enforce MFA and adaptive risk-based security.
• Security & Compliance Governance: Implement Role-Based Access Control (RBAC) and ensure the principle of least privilege is followed. Auditing: Generate reports for compliance (SOX, GDPR, HIPAA) showing who has access to what and when. Incident Response: Troubleshoot login failures, session timeouts, and synchronization errors.
• Modern DevOps Tasks Automation: Use Groovy or JavaScript to write custom scripts for authentication nodes or IDM triggers. IaC: Manage environment configurations using Terraform or Ansible and deploy via CI/CD pipelines.where applicable).
• Governance, Security & Mentorship Compliance: Ensure the platform meets global standards (GDPR, SOX, HIPAA) through robust audit logging and automated access reviews. Mentorship: Lead a team of 3 5 IAM engineers, providing code reviews, technical guidance, and certification support Professional & Technical Skills ForgeRock & CIAM :- Deep knowledge of AM (Access), IDM (Identity), DS (Directory), and IG (Gateway). Identity & Security :-
• OAuth 2.0
• OpenID Connect (OIDC)
• SAML 2.0
• JWT, REST APIs
• LDAP / directory services Scripting :-
• Java, JavaScript / Groovy (ForgeRock scripting)
• API security patterns
• Linux / Unix environments
• CI/CD and DevSecOps exposure Additional functional experience :-
• ForgeRock Identity Gateway (IG)
• Cloud platforms (AWS / Azure / GCP)
• Docker, Kubernetes
• ForgeRock or IAM certifications
• Experience with CIAM migrations (Ping, Okta, custom IAM) Additional Information:
• Bachelors and above degree in Computer Science, Information Technology, MIS, Engineering / Bachelor or college degree in related field or equivalent work experience (Full time).
• The candidate should have minimum 5 years of experience in ForgeRock Identity Management & overall 10+ years overall IT experience Certifications ForgeRock FRX-AM-CSE Certified