ForgeRock IAM Engineer – SSO, MFA & Access Governance

ConnectedGroup

Hong Kong

On-site

HKD 550,000 - 950,000

Full time

14 days+

Application generator

Turn this role into an interview — a resume and cover letter built around what this employer wants.

Get past ATS filters

Job summary

ConnectedGroup is seeking an experienced IAM Specialist to support ForgeRock-based identity and access management across a complex enterprise environment. The role focuses on identity governance, user lifecycle management, authentication services, and access controls to ensure secure, compliant access to business-critical systems and applications.

This role requires strong ForgeRock expertise with hands-on SSO, MFA, and identity federation capabilities, plus experience integrating enterprise

Qualifications

Bachelor's degree in Information Technology, Computer Science, Cyber Security, or related discipline.
Minimum 6 years of experience in Identity & Access Management, Identity Security, Cyber Security, or related disciplines.
Hands-on ForgeRock IAM experience in an enterprise environment.
Experience integrating IAM with cloud services, enterprise apps, and directory services.
Experience in regulated sectors (finance/insurance/telecom) preferred.
Certifications in IAM/Cyber Security/ForgeRock/Cloud are advantageous.
Excellent English communication; Cantonese or Putonghua would be an advantage.

Responsibilities

Administer, support, and enhance IAM platforms and services.
Manage end-to-end identity lifecycle (Joiner, Mover, Leaver).
Design, implement, and support authentication and authorization solutions using ForgeRock technologies.
Build and maintain SSO, MFA, and identity federation capabilities.
Configure and maintain RBAC models and access governance frameworks.
Integrate internal and third-party applications with IAM platforms using industry-standard authentication protocols.
Support user provisioning, deprovisioning, and entitlement management across enterprise applications.
Conduct periodic access reviews, certification exercises, and segregation of duties assessments.
Collaborate with application owners and business stakeholders to define access requirements and entitlement models.
Support Privileged Access Management (PAM) initiatives and access governance controls.
Investigate and resolve identity, authentication, and access-related incidents and technical issues.
Participate in IAM transformation projects, platform upgrades, and security enhancement initiatives.
Develop and maintain IAM operational procedures, standards, and technical documentation.
Work closely with Cyber Security and Audit teams to ensure compliance with regulatory and security requirements.
Drive automation and process improvement initiatives to improve efficiency and user experience.