ForgeRock IAM Engineer

Contract-to-hire opportunity in Jersey City, NJ for a FinTech client.

About the role

We are seeking a ForgeRock IAM Developer/Engineer with strong IAM fundamentals and a solid Java background to design, build, and support enterprise identity and access solutions across the ForgeRock Identity Platform (AM, IDM, DS, IG, and related components). AWS and Terraform experience is a plus.

Responsibilities

• Design, implement, and support solutions across the ForgeRock Identity Platform, including:
  • ForgeRock AM (Access Management): authentication trees/journeys, MFA, SSO, federation, sessions, policies, agents
  • ForgeRock IDM (Identity Management): provisioning, workflows, connectors, reconciliation, managed objects, REST integrations
  • ForgeRock DS (Directory Services): LDAP schema, replication, performance tuning, indexes, access controls
  • ForgeRock IG (Identity Gateway): routing, filtering, authorization enforcement, policy integration, protected apps/APIs
  • ForgeRock Identity Cloud / Autonomous Identity (if applicable): SaaS configuration, governance/insights use cases
• Build custom extensions and integrations using Java, scripting, and REST APIs (connectors, custom nodes, scripts, integrations).
• Implement federation and API security patterns using OAuth2/OIDC, SAML2, JWT, and secure token/session management.
• Support CI/CD, environment promotion, and configuration management (automation, deployment consistency).
• Troubleshoot complex IAM issues across applications, gateways, directories, and federation partners.

Requirements

• Hands-on experience across ForgeRock Identity Platform / ForgeRock Suite, including AM, IDM, DS, and IG (experience across all is preferred; strong depth in AM with exposure to others is acceptable).
• Strong IAM knowledge: SSO, federation, MFA, authorization (RBAC/ABAC), identity lifecycle, provisioning, access policies, session/token management.
• Strong Java development background (Core Java; ability to build/customize ForgeRock components and integrations).
• Strong understanding and hands-on use of IAM standards/protocols: OAuth 2.0 / OpenID Connect (OIDC), SAML 2.0, SCIM (preferred), JWT, TLS/mTLS.
• Solid experience with directories/identity stores: LDAP, Active Directory, schema/attributes/groups, replication considerations, performance and troubleshooting.
• Experience with operating ForgeRock in enterprise environments: Logging, monitoring, performance troubleshooting, high availability, and production support.

Nice to Have Skills

• AWS (EC2/EKS, ALB/NLB, CloudWatch, Secrets Manager, KMS, networking/security).
• Terraform for infrastructure provisioning and environment automation.
• Containers and orchestration: Docker, Kubernetes/OpenShift.
• CI/CD tools: Jenkins, GitHub Actions, GitLab CI.
• API gateways / reverse proxies: NGINX, Apigee, Kong, etc.

Qualifications

• Bachelor's Degree
• 5+ years of experience

Pay

$65-80/hr

About Korn Ferry

Korn Ferry unleashes potential in people, teams, and organizations. We work with our clients to design optimal organization structures, roles, and responsibilities. We help them hire the right people and advise them on how to reward and motivate their workforce while developing professionals as they navigate and advance their careers.