RemoteLeaf Logo
Log in Sign up

Senior IAM Engineer - ForgeRock

1 week ago
United States
Full-time
Senior
Security Engineer
DevOps and Infrastructure
Active Directory CI/CD Docker Git Groovy Java JavaScript Jenkins JSON Kubernetes Linux Microservices OpenID Connect Shell Scripting
Apply Now
Ensono

Ensono

Ensono provides comprehensive hybrid IT solutions and governance, enabling businesses to navigate complexity and modernize their technology infrastructure, from cloud services to mainframe systems, tailored to each client's unique journey.

IT Services
1K-5K
Founded 1969
View All Jobs 52

Description

  • Monitor platform health across the ForgeRock suite, including AM, IDM, DS, and IG.
  • Manage system upgrades, security patches, and hotfix deployments with minimal business disruption.
  • Maintain directory integrations with enterprise systems such as Active Directory, Azure AD/Entra ID, and HR systems.
  • Optimize platform capacity by tuning JVM, database connectors, and LDAP performance.
  • Provide L3 support for complex identity federation, SSO, and authentication routing incidents.
  • Conduct root cause analysis for system failures, performance issues, and certificate expirations, and implement permanent fixes.
  • Oversee backup and disaster recovery procedures and verify snapshot integrity for identity data and configurations.
  • Maintain operational documentation such as SOPs, runbooks, and architecture diagrams.
  • Build custom authentication scripts and logic plugins using Java, JavaScript, or Groovy.
  • Configure authentication journeys, MFA, risk-based access controls, and Zero Trust validation policies.
  • Develop JSON-based route profiles in ForgeRock Identity Gateway for legacy applications and microservice APIs.
  • Automate deployment workflows using CI/CD and infrastructure-as-code in Docker or Kubernetes environments.

Requirements

  • 6+ years of professional experience in Identity & Access Management, including at least 2+ years in the ForgeRock ecosystem.
  • Strong experience with ForgeRock AM, IDM, DS, and IG components, configuration files, and properties.
  • Deep understanding of OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and LDAP.
  • Proficiency writing production-grade scripts in Groovy, JavaScript, or Java.
  • Comfort working in Linux server environments, command-line interfaces, and shell scripting.
  • ForgeRock Certified Access Management Specialist, Identity Management Specialist, or equivalent Ping Identity certifications preferred.
  • Hands-on familiarity with Git, Jenkins, Docker, or Kubernetes preferred.

Benefits

  • Unlimited Paid Days Off.
  • Three health plan options.
  • 401(k) with company match.
  • Dental, vision, short- and long-term disability, life and AD&D coverage, and flexible spending accounts.
  • Family forming benefit, including fertility coverage and adoption/surrogacy reimbursement.
  • Paid childbearing and paternal leave.
  • Education reimbursement, student loan assistance, or 529 college funding.
  • Sabbatical leave.
  • Wellness program.
  • Flexible work schedule and the ability to work remotely most of the time when not required on client site.
  • Annual bonus plan based on company and individual performance.
  • Equity grant under Ensono’s Associate Equity Appreciation Program.
  • Annual base salary range of $125,000 to $162,000.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Keywords Studios

Active Directory / Identity Engineer

Keywords Studios 10K-50K Internet Software & Services

Keywords Group is seeking an experienced Active Directory SME and Azure Identity Lead to guide company-wide identity architecture and support global IT across on-premises and cloud environments.

United Kingdom Full-time Lead Security Engineer
Active Directory Cybersecurity DHCP DNS PowerShell
11 hours, 6 minutes ago
Klaviyo

Senior Security Compliance Engineer

Klaviyo 1K-5K IT Services

Klaviyo is seeking a Senior Security Compliance Engineer to help its Security Trust & Risk team automate and scale compliance operations, continuous monitoring, and GRC tooling across a fast-growing AI-first B2C CRM platform.

United States Full-time Senior Security Engineer
$120k-$180k
AWS CI/CD Go HIPAA Kubernetes Python REST API SQL
11 hours, 51 minutes ago
PetDesk

Website Security Engineer

PetDesk 51-250 Health Care Providers & Services

PetDesk is hiring a Website Security Specialist to protect its website portfolio by preventing vulnerabilities, responding to incidents, and maintaining secure technical operations across the full site lifecycle.

Sri Lanka Contract Junior Security Engineer
WordPress
11 hours, 51 minutes ago
Zscaler

Principal AI Security Specialist - Federal

Zscaler 1K-5K Internet Software & Services

Zscaler is hiring a Principal AI Security Specialist to lead field-facing enterprise AI security engagements, helping Fortune 500 customers adopt GenAI securely across complex sales cycles.

United States Full-time Lead AI (Artificial Intelligence) Security Engineer
$176k-$251k
Cybersecurity Generative AI LLM
1 day, 10 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers