Lead ForgeRock Engineer

Blue Cross and Blue Shield of Massachusetts, Inc.; Golden Horseshoe; Hybrid; CAD 80,000 - 110,000; Full time

Job summary

An established industry player is seeking a talented ForgeRock Engineer to design and implement cutting-edge identity access management solutions. This pivotal role focuses on enhancing IAM capabilities, automating workflows, and ensuring compliance with security standards. You will collaborate closely with stakeholders to translate business requirements into effective technical solutions while driving the implementation of innovative access governance strategies. Join a forward-thinking team where your expertise in IAM and ForgeRock will create significant value and contribute to the organization's success. If you're passionate about security and technology, this opportunity is perfect for you.

Qualifications

• 5+ years in IAM or security engineering with hands-on experience.
• Strong knowledge of ForgeRock/Ping Identity architecture and workflows.

Responsibilities

• Implement SSO, MFA, and access governance solutions.
• Collaborate with stakeholders to translate business needs into technical specs.

Skills

ForgeRock

IAM Engineering

MFA Implementation

SSO Technologies

Java

PowerShell

REST API Integration

Database Technologies

Problem-Solving Skills

Communication Skills

Education

Bachelor's Degree in Computer Science

Relevant Certifications in IAM

Tools

ForgeRock/Ping Identity

SailPoint

Job description

ForgeRock Engineer

The ForgeRock/Ping Identity engineer is responsible for designing, implementing, and maintaining identity access management (IAM) solutions. This role includes identifying opportunities for automation, driving the implementation of solutions to create value, and enhancing IAM and IGA capabilities. Key responsibilities include application onboarding, workflow automation, and access policy configuration.

Key Responsibilities:

• Implement SSO, MFA, identity federation, and access governance
• Configure and integrate ForgeRock with other applications, directories, and systems as required
• Enhance current ForgeRock capabilities to align with industry best practices and standards
• Collaborate with key stakeholders to understand and translate business requirements into technical specifications for ForgeRock/Ping Identity
• Perform hands-on configuration and customization of the ForgeRock/Ping Identity platform to meet specific needs
• Document the design, configuration, and customizations made to the ForgeRock/Ping Identity platform
• Work closely with the IAM Architect, implementation partner, and other team members to ensure seamless delivery of the IAM solution
• Work with application and security teams to troubleshoot provisioning, authentication, and access-related issues
• Ensure compliance with security policies, audit requirements, and industry standards
• Support audits by providing documentation, logs, or reports as needed

Technical Expertise:

• In-depth knowledge of ForgeRock/Ping Identity features and functionality
• Hands-on engineering experience with IGA capabilities including application onboarding, RBAC, access request configuration, access reviews, and lifecycle events
• Familiarity with access management, access governance, SOD, attribute-based access control, and role-based access control (RBAC) concepts
• Familiarity with SSO technologies (SAML, OIDC)
• Experience implementing SSO, MFA, identity federation, and access governance
• Strong knowledge of ForgeRock/Ping Identity architecture, configurations, capabilities, and workflows
• Experience with IAM and IGA best practices and industry standards
• Experience with Zero Trust security models
• Excellent problem-solving skills and the ability to troubleshoot technical issues effectively
• Strong communication and interpersonal skills, with the ability to work collaboratively in a team environment

Qualifications:

• Bachelor's degree in Computer Science, Security, or a related field (or equivalent experience)
• 5+ years in IAM or security engineering
• 3+ years of hands-on IAM engineering experience
• 2+ years of ForgeRock engineering experience
• 3+ years of experience with Java, PowerShell, REST API integration, BeanShell, and Database Technologies
• Experience with SailPoint is a plus
• Relevant certifications in ForgeRock/Ping Identity or IAM are highly desirable

#LI-Hybrid