ForgeRock Manager Information Security

DXC Technology Inc.; Ontario; On-site; CAD 100,000 - 140,000; Full time

Job summary

DXC Technology is seeking a highly skilled Manager of Information Security to lead the transformation of a complex Customer Identity Access Management (CIAM) system. This role involves overseeing the migration from legacy systems to cloud-native solutions while managing high-performing teams and aligning IAM solutions with business needs. A strong candidate will bring expertise in IAM and compliance standards, alongside leadership and technical skills.

Qualifications

• Deep technical expertise in IAM required.
• Experience in large-scale transformations necessary.
• Proven ability to manage high-performing teams.

Responsibilities

• Lead modernization of CIAM platform and migrate legacy systems.
• Define and execute IAM strategy and implementation plans.
• Manage and mentor IAM engineers.

Skills

Technical leadership

People management

IAM transformations

Cloud security

Compliance standards

Education

Relevant security certifications

ForgeRock certification (good to have)

Tools

ForgeRock

Okta

Auth0

Jenkins

Terraform

Job description

Job Description:

ForgeRock Manager Information Security

We are seeking a highly experienced and technically proficient Manager – Information Security to lead the transformation of a complex Customer Identity and Access Management (CIAM) ecosystem. This role is responsible for overseeing the migration from legacy identity platforms to modern, cloud-native solutions using ForgeRock, Okta, and Auth0. The Manager will provide strategic direction, technical leadership, and people management to ensure the delivery of secure, scalable, and compliant identity services across enterprise and customer-facing applications.

This position requires a blend of deep technical expertise, strong leadership capabilities, and a proven ability to manage high-performing teams. The ideal candidate will have experience in large-scale IAM transformations, particularly in regulated environments, and will be comfortable working across architecture, security, operations, and business domains.

What You Will Do

• Lead the end-to-end modernization of the CIAM platform, migrating from legacy systems including ForgeRock (OpenAM, OpenIDM, OpenDJ) and SiteMinder to Okta and Auth0.
• Define and execute IAM strategy, architecture, and implementation plans aligned with enterprise security and compliance objectives.
• Manage and mentor a team of IAM engineers and architects, conducting performance reviews, setting goals, and fostering professional development.
• Design and implement secure identity architectures using ForgeRock Access Management, OAuth 2.0, OpenID Connect, SAML 2.0, and FIDO2 protocols.
• Oversee the development of authentication and authorization flows, including adaptive MFA, risk-based access, and step-up authentication using ForgeRock scripting (JavaScript, Groovy) and Okta workflows.
• Direct the migration and synchronization of identity data from ForgeRock OpenDJ, eDirectory, and SiteMinder to Okta Universal Directory, optimizing LDAP schemas and replication strategies.
• Develop and maintain RESTful APIs for identity services and integrate IAM with cloud platforms (e.g., AWS), enterprise applications, and third-party services using SCIM, OIDC, and custom connectors.
• Automate IAM infrastructure deployment and configuration using CI/CD tools such as Jenkins, Terraform, GitHub Actions, and Ansible.
• Monitor IAM systems using tools like Dynatrace and Splunk, ensuring high availability, performance, and compliance with SLAs.
• Implement and manage privileged access controls using Centrify PAM and enforce internal security baselines.
• Ensure compliance with regulatory standards such as SOC 2, ISO 27001, and GDPR through continuous monitoring and audit readiness.
• Collaborate with cross-functional teams including security, infrastructure, and application development to align IAM solutions with business needs.
• Lead stakeholder engagement, requirement gathering, deployment planning, and status reporting.
• Create and maintain technical documentation, runbooks, and standard operating procedures to support operational readiness and knowledge transfer.

Certifications

• Good to have a ForgeRock certification
• Good to have any Security certification

DXC Technology (NYSE: DXC) helps global companies run their mission critical systems and operations while modernizing IT, optimizing data architectures, and ensuring security and scalability across public, private and hybrid clouds. The world’s largest companies and public sector organizations trust DXC to deploy services across the Enterprise Technology Stack to drive new levels of performance, competitiveness, and customer experience. Learn more about how we deliver excellence for our customers and colleagues at DXC.com.

DXC is an equal opportunity employer. We welcome the many dimensions of diversity. Accommodation of special needs for qualified candidates may be considered within the framework of the DXC Accommodation Policy.

In addition, DXC Technology is committed to working with and providing reasonable accommodation to qualified individuals with physical and mental disabilities. If you need assistance in filling out the employment application or require a reasonable accommodation while seeking employment, please e-mail AODA Canada Requests.

Note: This option is reserved for applicants needing a reasonable accommodation related to a disability.

At DXC Technology, we believe strong connections and community are key to our success. Our work model prioritizes in-person collaboration while offering flexibility to support wellbeing, productivity, individual work styles, and life circumstances. We’re committed to fostering an inclusive environment where everyone can thrive.

Recruitment fraud is a scheme in which fictitious job opportunities are offered to job seekers typically through online services, such as false websites, or through unsolicited emails claiming to be from the company. These emails may request recipients to provide personal information or to make payments as part of their illegitimate recruiting process. DXC does not make offers of employment via social media networks and DXC never asks for any money or payments from applicants at any point in the recruitment process, nor ask a job seeker to purchase IT or other equipment on our behalf.More information on employment scams is availablehere.