Senior Engineer - IAM Stability

LPL Financial; Hyderabad; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

LPL Financial LLC is seeking an experienced Sr. IAM Stability Engineer to support, maintain, and enhance enterprise IAM platforms across on-prem and AWS.

You will ensure high availability, strong security, and reliable operations in a complex financial services environment. In this role you will manage ForgeRock and PingFederate deployments, implement SSO, MFA, and identity lifecycle processes, and collaborate with security and infrastructure teams to drive continuous improvement and audit

Qualifications

• 5+ years IAM support and engineering experience.
• Hands-on with ForgeRock, PingFederate, ForgeRock Identity Cloud, ForgeRock Identity Governance.
• Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, Active Directory, and MFA.
• Experience with C#, ASP.NET, .NET APIs, TIBCO BW, AngularJS, SQL databases, PostgreSQL, and Python.
• Experience navigating AWS services including Lambda, Glue, CloudWatch, IAM.
• Hands-on with Splunk and Dynatrace for monitoring and troubleshooting.
• Strong troubleshooting, incident management, and production support skills.
• Minimum 3 years ForgeRock Identity Cloud configuration and development.
• Minimum 5 years implementing and supporting SSO using SAML and OAuth.
• Working experience with Java and PingFederate.

Responsibilities

• Support and maintain IAM platforms to ensure high availability and security.
• Monitor IAM services, troubleshoot production incidents, perform RCA and drive reliability improvements.
• Manage authentication, SSO, federation, MFA, provisioning, and identity lifecycle processes.
• Collaborate with infrastructure, security, and application teams to resolve production issues.
• Implement monitoring, automation, patching, vulnerability remediation, and runbooks.
• Maintain technical documentation, operational runbooks, and audit/compliance requirements.
• Participate in incident bridges and lead recovery during production incidents.
• Support cloud-based IAM integrations and services within AWS.

Skills

IAM stability engineering

ForgeRock

PingFederate

SAML 2.0

OAuth 2.0

OIDC

LDAP

Active Directory

MFA

C#

ASP.NET

.NET APIs

TIBCO BW

AngularJS

SQL

PostgreSQL

Python

AWS

Lambda

CloudWatch

IAM

Splunk

Dynatrace

GitHub

Octopus Deploy

Incident management

Production support

Tools

Splunk

Dynatrace

GitHub

Octopus Deploy

Job description

Where Ambition Meets Innovation At LPL's Global Capability Center, you'll find a collaborative culture where your voice matters, integrity guides every decision, and technology fuels progress. Your skills, talents, and ideas will redefine what's possible. LPL's success reflects its exceptional employees, who together pursue one noble purpose: empowering financial advisors to deliver personalized advice for all who need it. We're proud to be expanding and reaching new heights in Hyderabad. Join us as we create something extraordinary together.

Job Overview:

We are seeking an experienced Sr. IAM Stability Engineer to support, maintain, and enhance enterprise Identity and Access Management (IAM) platforms, ensuring high availability, performance, security, and operational stability across on-premises and AWS environments.

Responsibilities:

Support and maintain ForgeRock (AM, IDM, DS, Identity Cloud), PingFederate, P1AIC, and P1AIC IGA platforms. Monitor IAM services, troubleshoot production incidents, perform root cause analysis (RCA), and drive platform reliability improvements. Manage authentication, Single Sign-On (SSO), federation, MFA, provisioning, and identity lifecycle processes. Support and enhance IAM-integrated applications built on ASP.NET Console Applications, .NET APIs, TIBCO BW, and AngularJS. Collaborate with infrastructure, security, and application teams to resolve production issues. Implement monitoring, automation, patching, vulnerability remediation, and operational best practices. Maintain technical documentation, operational runbooks, and support audit/compliance requirements. Participate in incident bridges and lead recovery efforts during production incidents. Support cloud-based IAM integrations and services within AWS environments. Ensure continuous improvement, stability, availability, and security of enterprise IAM services.

What are we looking for?

We seek strong collaborators who can deliver a world-class client experience. The ideal candidate thrives in a fast-paced environment, is client-focused, team-oriented, and demonstrates a passion for innovation, problem-solving, and continuous improvement.

Requirements:

• 5+ years of IAM support and engineering experience.
• Hands-on expertise with ForgeRock, PingFederate, ForgeRock Identity Cloud, and ForgeRock Identity Governance solutions.
• Strong knowledge of SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, Active Directory, and MFA.
• Experience with C#, ASP.NET, .NET APIs, TIBCO BW, AngularJS, SQL databases, PostgreSQL, and Python.
• Experience navigating and troubleshooting AWS services, including Lambda, Glue, CloudWatch, IAM, and related infrastructure components.
• Hands-on experience using Splunk and Dynatrace for monitoring and troubleshooting.
• Strong troubleshooting, incident management, and production support skills.
• Minimum 3 years of experience with ForgeRock Identity Cloud configuration and development.
• Minimum 5 years of experience implementing and supporting SSO solutions using SAML and OAuth.
• Working experience with Java and PingFederate.

Preferences:

• Expertise in developing authentication journeys, self-service workflows, and access management solutions.
• Strong understanding of OpenID Connect (OIDC) and OAuth 2.0 standards and best practices.
• Working knowledge of DevOps tools and practices, including GitHub and Octopus Deploy.
• Experience with automation, scripting, and operational efficiency initiatives.

Core Competencies:

• Experience iin Production support, platform stability, incident management.
• Experience in ForgeRock Identity Cloud, PingFederate federation services, IAM governance.
• Experience in AWS integrations, and continuous service improvement.

LPL Global Business Services, LLP - PRIVACY POLICY