Forgerock Consultant

Tata Consultancy Services; Hyderabad; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Tata Consultancy Services is seeking a ForgeRock Engineer to design, configure, and support ForgeRock in a complex workforce IAM environment. This role focuses on federation with Microsoft Entra ID and enabling a phased migration toward Entra ID as the single entry point for workforce authentication.

You will engineer ForgeRock AM, manage federation flows, and integrate with RSA and ADFS while supporting legacy systems and modern applications.

Qualifications

• Strong hands-on experience with ForgeRock AM (authentication trees, federation, access policies).
• Deep understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC).
• Experience integrating ForgeRock with Microsoft Entra ID / Azure AD.
• Experience in multi-IDP enterprise environments.
• Strong troubleshooting skills across authentication, claims, certificates, and federation flows.

Responsibilities

• Engineer and support ForgeRock Access Management (AM) for workforce authentication.
• Configure and manage authentication flows, federation, and application integrations.
• Implement and support ForgeRock Microsoft Entra ID federation (POC and production).
• Support integrations with RSA, ADFS, and legacy identity systems.
• Assess applications tightly integrated with ForgeRock and define migration or coexistence strategies.
• Troubleshoot complex SSO, federation, and authentication issues.
• Support remediation of legacy or non‑standard authentication patterns.

Skills

ForgeRock AM

SAML 2.0

OAuth 2.0

OIDC

Federation

Microsoft Entra ID / Azure AD

Multi-IDP

Troubleshooting

Tools

ForgeRock AM

RSA

ADFS

Job description

The ForgeRock Engineer will design, configure, and support ForgeRock within a complex workforce IAM environment. The role is critical for enabling federation with Microsoft Entra ID, supporting legacy and modern application authentication, and enabling a phased migration toward Entra ID as the single workforce entry point.

Key Responsibilities

• Engineer and support ForgeRock Access Management (AM) for workforce authentication.
• Configure and manage authentication flows, federation, and application integrations.
• Implement and support ForgeRock Microsoft Entra ID federation (POC and production).
• Support integrations with RSA, ADFS, and legacy identity systems.
• Assess applications tightly integrated with ForgeRock and define migration or coexistence strategies.
• Troubleshoot complex SSO, federation, and authentication issues.
• Support remediation of legacy or non‑standard authentication patterns.

Mandatory Skills & Experience

• Strong hands‑on experience with ForgeRock AM (authentication trees, federation, access policies).
• Deep understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC).
• Experience integrating ForgeRock with Microsoft Entra ID / Azure AD.
• Experience in multi-IDP enterprise environments.
• Strong troubleshooting skills across authentication, claims, certificates, and federation flows.

Preferred Experience

• Experience supporting Identity Provider consolidation programs.
• Familiarity with MFA integration and authentication hardening.
• Experience working with applications that do not support SAML/OIDC.