Forgerock IAM Engineer

Orbus International; Hyderabad, Chennai District; On-site; INR 1,200,000 - 2,300,000; Full time

Job summary

Orbus International is seeking a ForgeRock Engineer to design, configure, and support ForgeRock AM within a workforce IAM environment. The role emphasizes federation with Microsoft Entra ID and guiding a phased migration toward Entra ID as the single entry point for workforce authentication.

You will implement authentication flows, integrate with RSA and ADFS, and troubleshoot complex SSO and federation issues while supporting legacy and modern applications.

Qualifications

• Strong hands-on experience with ForgeRock AM (authentication trees, federation, access policies).
• Deep understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC).
• Experience integrating ForgeRock with Microsoft Entra ID / Azure AD.
• Experience in multiIDP enterprise environments.
• Strong troubleshooting skills across authentication, claims, certificates, and federation flows.

Responsibilities

• Engineer and support ForgeRock Access Management (AM) for workforce authentication.
• Configure and manage authentication flows, federation, and application integrations.
• Implement and support ForgeRock and Microsoft Entra ID federation (POC and production).
• Support integrations with RSA, ADFS, and legacy identity systems.
• Assess applications tightly integrated with ForgeRock and define migration or coexistence strategies.
• Troubleshoot complex SSO, federation, and authentication issues.
• Support remediation of legacy or nonstandard authentication patterns.

Skills

ForgeRock AM

SAML 2.0

OAuth 2.0

OIDC

Microsoft Entra ID / Azure AD

Federation/SSO

Troubleshooting

Tools

RSA

ADFS

Job description

The ForgeRock Engineer will design, configure, and support ForgeRock within a complex workforce IAM environment. The role is critical for enabling federation with Microsoft Entra ID, supporting legacy and modern application authentication, and enabling a phased migration toward Entra ID as the single workforce entry point.

Key Responsibilities

• Engineer and support ForgeRock Access Management (AM) for workforce authentication.
• Configure and manage authentication flows, federation, and application integrations.
• Implement and support ForgeRock and Microsoft Entra ID federation (POC and production).
• Support integrations with RSA, ADFS, and legacy identity systems.
• Assess applications tightly integrated with ForgeRock and define migration or coexistence strategies.
• Troubleshoot complex SSO, federation, and authentication issues.
• Support remediation of legacy or nonstandard authentication patterns.

Mandatory Skills & Experience

• Strong handson experience with ForgeRock AM (authentication trees, federation, access policies).
• Deep understanding of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC).
• Experience integrating ForgeRock with Microsoft Entra ID / Azure AD.
• Experience in multiIDP enterprise environments.
• Strong troubleshooting skills across authentication, claims, certificates, and federation flows.

Preferred Experience

• Experience supporting Identity Provider consolidation programs.
• Familiarity with MFA integration and authentication hardening.
• Experience working with applications that do not support SAML/OIDC.