ForgeRock IDM Engineer

Role Summary

The ForgeRock IDM Engineer is responsible for designing, implementing, and governing enterprise Identity and Access Management (IAM) solutions using the ForgeRock Identity Platform (On-Premise), with a primary focus on ForgeRock Identity Management (IDM).

Key Responsibilities

Identity Lifecycle Management

• Design and implement Joiner-Mover-Leaver (JML) processes.
• Configure automated provisioning and de-provisioning workflows.
• Implement role-based access control (RBAC) and attribute-based access control (ABAC).
• Design identity reconciliation, attestation, and certification processes.
• Access Request management
• Enable self-service identity management and delegated administration capabilities.

Implementation & Integration

• Lead ForgeRock IDM implementation engagements.
• Integrate ForgeRock IDM with:
• Active Directory
• Azure AD / Microsoft Entra ID
• LDAP Directories
• HR Systems (Workday, Oracle EBS)
• ITSM (Manage Engine)
• Beyond Trust PAM
• SharePoint On-Premise
• Databases and custom applications
• Configure connectors, synchronization policies, mappings, workflows, and managed objects.
• Develop custom integrations using REST APIs, Java, Groovy, JavaScript, and SCIM.

Operations & Support

• Support production deployments and platform upgrades.
• Perform performance tuning and system optimization.
• Investigate and resolve complex IAM-related issues.
• Develop monitoring, logging, backup, and disaster recovery strategies.
• Ensure high availability and scalability of the ForgeRock environment.

ForgeRock Expertise

• Strong experience with:
• ForgeRock Identity Management (IDM)
• ForgeRock Access Management (AM)
• ForgeRock Directory Services (DS)
• ForgeRock Identity Gateway (IG)

IAM Skills

• Expertise in:
• Identity Lifecycle Management
• User Provisioning & De-Provisioning
• Access Governance
• Identity Federation

Development & Scripting

• Java
• JavaScript
• Groovy
• REST API Development
• PowerShell
• Python
• JSON/XML

Directory & Identity Integrations

• Active Directory
• Microsoft Entra ID (Azure AD)
• LDAP Directories
• Database Integrations
• HR Systems Integration

Experience Requirements

• 5-8 years of overall IT experience.
• 3+ years of hands-on ForgeRock IDM implementation and deployment experience.
• Experience leading large-scale IAM transformation programs.
• Experience implementing enterprise identity governance and lifecycle management solutions.

Preferred Certifications

ForgeRock Certifications

• ForgeRock Certified Identity Management Specialist