RemoteLeaf Logo
Log in Sign up

Senior IAM Engineer - ForgeRock

3 weeks, 6 days ago
United States
Full-time
Senior
Security Engineer
DevOps and Infrastructure
Active Directory CI/CD Docker Git Groovy Java JavaScript Jenkins JSON Kubernetes Linux Microservices OpenID Connect Shell Scripting
Apply Now
Ensono

Ensono

Ensono provides comprehensive hybrid IT solutions and governance, enabling businesses to navigate complexity and modernize their technology infrastructure, from cloud services to mainframe systems, tailored to each client's unique journey.

IT Services
1K-5K
Founded 1969
View All Jobs 39

Description

  • Monitor platform health across the ForgeRock suite, including AM, IDM, DS, and IG.
  • Manage system upgrades, security patches, and hotfix deployments with minimal business disruption.
  • Maintain directory integrations with enterprise systems such as Active Directory, Azure AD/Entra ID, and HR systems.
  • Optimize platform capacity by tuning JVM, database connectors, and LDAP performance.
  • Provide L3 support for complex identity federation, SSO, and authentication routing incidents.
  • Conduct root cause analysis for system failures, performance issues, and certificate expirations, and implement permanent fixes.
  • Oversee backup and disaster recovery procedures and verify snapshot integrity for identity data and configurations.
  • Maintain operational documentation such as SOPs, runbooks, and architecture diagrams.
  • Build custom authentication scripts and logic plugins using Java, JavaScript, or Groovy.
  • Configure authentication journeys, MFA, risk-based access controls, and Zero Trust validation policies.
  • Develop JSON-based route profiles in ForgeRock Identity Gateway for legacy applications and microservice APIs.
  • Automate deployment workflows using CI/CD and infrastructure-as-code in Docker or Kubernetes environments.

Requirements

  • 6+ years of professional experience in Identity & Access Management, including at least 2+ years in the ForgeRock ecosystem.
  • Strong experience with ForgeRock AM, IDM, DS, and IG components, configuration files, and properties.
  • Deep understanding of OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and LDAP.
  • Proficiency writing production-grade scripts in Groovy, JavaScript, or Java.
  • Comfort working in Linux server environments, command-line interfaces, and shell scripting.
  • ForgeRock Certified Access Management Specialist, Identity Management Specialist, or equivalent Ping Identity certifications preferred.
  • Hands-on familiarity with Git, Jenkins, Docker, or Kubernetes preferred.

Benefits

  • Unlimited Paid Days Off.
  • Three health plan options.
  • 401(k) with company match.
  • Dental, vision, short- and long-term disability, life and AD&D coverage, and flexible spending accounts.
  • Family forming benefit, including fertility coverage and adoption/surrogacy reimbursement.
  • Paid childbearing and paternal leave.
  • Education reimbursement, student loan assistance, or 529 college funding.
  • Sabbatical leave.
  • Wellness program.
  • Flexible work schedule and the ability to work remotely most of the time when not required on client site.
  • Annual bonus plan based on company and individual performance.
  • Equity grant under Ensono’s Associate Equity Appreciation Program.
  • Annual base salary range of $125,000 to $162,000.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Hasbro

Principal Identity Engineer

Hasbro 5K-10K Consumer Goods

Wizards of the Coast is hiring a Principal Identity Engineer to own the technical direction of its enterprise identity architecture, supporting Zero Trust, privileged access, and identity governance across cloud and on-premises environments.

United States Full-time Lead Security Engineer
$173k-$259k
Active Directory CI/CD Git OpenID Connect PowerShell Pulumi Python REST API SAML Terraform
14 hours, 26 minutes ago
Dragos

Senior Device Engineer

Dragos 251-1K Professional Services

Dragos is hiring a Senior Device Engineer to build automation software that identifies, fingerprints, and interacts with network-connected devices across critical infrastructure environments.

United States Full-time Senior Embedded Systems Engineer Security Engineer
$165k-$165k
Cybersecurity Docker Embedded Systems Go HTTP JavaScript Node.js TCP/IP TLS TypeScript
14 hours, 26 minutes ago
Jolera

Elastic Engineer

Jolera 251-1K Internet Software & Services

Jolera is seeking an Elastic Engineer to design and operate scalable Elasticsearch-based environments for cybersecurity analytics, threat hunting, and detection workflows.

India Full-time Senior DevOps Engineer Security Engineer
Cybersecurity Elasticsearch Encryption Java Kibana Linux Logstash Machine Learning Python Ruby
14 hours, 56 minutes ago
BeyondTrust

Staff Software Development Engineer - Windows Endpoint

BeyondTrust 1K-5K Professional Services

BeyondTrust is hiring a Staff Software Development Engineer to own Windows kernel-mode enforcement for its Identity Security Platform, building real-time security controls that decide whether actions on Windows endpoints are permitted or denied.

United States Canada Full-time Lead Security Engineer Software Engineer
Agile C C++ Rust
14 hours, 56 minutes ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers