Senior Engineer - Identity & Access Management Engineering

LPL Financial LLC; Hyderabad; On-site; INR 3,000,000 - 5,200,000; Full time

Job summary

LPL’s Identity & Access Management Engineering team is seeking a Sr Engineer, Authentication, to engineer and maintain the IAM platform using ForgeRock product suite. The role focuses on implementing secure authentication and authorization across enterprise systems in Hyderabad.

Ideal candidates will have extensive ForgeRock experience, strong Java and scripting skills, and a track record delivering IAM solutions with SAML and OAuth in on-prem and cloud contexts.

Qualifications

• Minimum 8 years of experience in PingOne Identity & Access Management.
• Minimum 5 years of using ForgeRock products (AM, IDM, DS, CTS).
• Minimum 3 years of ForgeRock Identity Cloud configuration and development.
• Minimum 5 years of experience with SAML and OAuth configuration.

Responsibilities

• Shape the future direction of IAM applications deployed at LPL.
• Provide professional support across production, development, and project activities.
• Collaborate with vendor partners or internal teams to design and deliver IAM solutions.
• Work with security architects to maintain the IAM roadmap and standards.
• Mentor and guide other team members.

Skills

IAM expertise

ForgeRock

Java

SAML/OAuth

Decision making

Tools

ForgeRock AM

ForgeRock IDM

ForgeRock DS

ForgeRock CTS

PingOne

PingFederate

OpenID Connect

OAuth 2.0

Octopus

GitHub

Job description

Where Ambition Meets Innovation At LPL’s Global Capability Center, you'll find a collaborative culture where your voice matters, integrity guides every decision, and technology fuels progress. Your skills, talents, and ideas will redefine what's possible. LPL's success reflects its exceptional employees, who together pursue one noble purpose: empowering financial advisors to deliver personalized advice for all who need it. We’re proud to be expanding and reaching new heights in Hyderabad. Join us as we create something extraordinary together.

Job Overview:

LPL’s Identity & Access Management Engineering organization is looking for talented professionals to join a high-performing team that is charged with supporting and enhancing our Authentication and Authorization Solutions Engineering team. As Sr Engineer, Authentication, this position will be a primary technical resource tasked with engineering and maintaining our Identity and Access Management platform with ForgeRock product suite.

Responsibilities:

• Help shape the future direction and use of the applications as they are currently deployed at the LPL
• Provide professional support, and valued contributions to a range of production support, development, and project activities
• Responsible for working with the vendor partners or internal teams to design and deliver IAM solutions
• Collaborate with the security architects to help create/maintain the IAM roadmap at the LPL
• Work with the teams to ensure standards are being followed for current and future IAM implementations
• Work with Product owner and stakeholders to provide solutions or address any gaps in the current implementation
• Responsible for installing, configuring, customizing, and maintaining the Identity and Access Management products
• Responsible for the overall performance and stability of the applications built using the Identity and Access Management products
• Responsible for mentoring and providing guidance to the other team members

What are we looking for?

We want strong collaborators who can deliver a world-class client experience. We are looking for people who thrive in a fast-paced environment, are client-focused, team oriented, and can execute in a way that encourages creativity and continuous improvement.

Requirements:

• Minimum 8 years of experience in PingOne Identity & Access Management.
• Minimum 5 years of using ForgeRock products mandatory.
• Minimum 5 years of experience of using ForgeRock AM, IDM, DS and CTS in on-premises setup and development.
• Minimum 3 years of experience in ForgeRock Identity Cloud configuration and development.
• Minimum 5 years of experience of single sign of configuration using SAML and oAuth.
• Working experience with Java and PingFederate

Core Competencies:

• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate actions.
• Organizational skills that enable one to work on several tasks simultaneously, providing management with appropriate insight into the workload and priorities.
• Original and innovative thinking that produces new ideas and creates innovative solutions.
• Demonstrated ability to develop and implement process improvement initiatives.

Preferences:

• Expert in development of authentication journey, self-service etc.
• Clear understanding and working knowledge of Open ID Connect and oAuth 2.
• Working knowledge of DevOps (Octopus, GitHub) is a plus

LPL Global Business Services, LLP - PRIVACY POLICY