ForgeRock IAM Engineer

Ports North; Jersey City (NJ); On-site; USD 90,000 - 110,000; Full time

Job summary

Korn Ferry is seeking a ForgeRock IAM Engineer in Jersey City, NJ, to design, build, and support enterprise IAM solutions across the ForgeRock Identity Platform. The role emphasizes AM/IDM/DS/IG, Java development, and integration work within a FinTech client environment.

The ideal candidate has a strong IAM background, experience with OAuth2/OIDC, SAML2, JWT, and a proven ability to implement federated identity, MFA, and secure token management in large-scale deployments.

Qualifications

• Strong IAM experience across ForgeRock suite with AM focus
• Java development background for ForgeRock components
• Experience with OAuth2/OIDC, SAML2, JWT; token management
• LDAP/Active Directory directory services expertise
• Enterprise deployment: logging, monitoring, HA, production support

Responsibilities

• Design, implement, and support ForgeRock Identity Platform solutions across AM/IDM/DS/IG
• Build custom extensions and integrations using Java, scripting, REST APIs
• Implement federation and API security patterns (OAuth2/OIDC, SAML2, JWT)
• Support CI/CD, environment promotion, and configuration management
• Troubleshoot IAM issues across apps, gateways, and federation partners
• Collaborate with enterprise teams to ensure security, scalability, and reliability
• Provide guidance on deployment and performance optimization

Skills

ForgeRock IAM

Java development

IAM protocols

LDAP/AD

Enterprise deployment

AWS experience

Education

Bachelor's Degree

Tools

AWS

Terraform

Docker

Kubernetes

Jenkins

Job description

We are seeking a ForgeRock IAM Developer/Engineer with strong IAM fundamentals and a solid Java background to design, build, and support enterprise identity and access solutions across the ForgeRock Identity Platform (AM, IDM, DS, IG, and related components). AWS and Terraform experience is a plus. This is a contract to hire opportunity in Jersey City, NJ.

Responsibilities

• Design, implement, and support solutions across the ForgeRock Identity Platform, including:
• ForgeRock AM (Access Management): authentication trees/journeys, MFA, SSO, federation, sessions, policies, agents
• ForgeRock IDM (Identity Management): provisioning, workflows, connectors, reconciliation, managed objects, REST integrations
• ForgeRock DS (Directory Services): LDAP schema, replication, performance tuning, indexes, access controls
• ForgeRock IG (Identity Gateway): routing, filtering, authorization enforcement, policy integration, protected apps/APIs
• ForgeRock Identity Cloud / Autonomous Identity (if applicable): SaaS configuration, governance/insights use cases
• Build custom extensions and integrations using Java, scripting, and REST APIs (connectors, custom nodes, scripts, integrations).
• Implement federation and API security patterns using OAuth2/OIDC, SAML2, JWT, and secure token/session management.
• Support CI/CD, environment promotion, and configuration management (automation, deployment consistency).
• Troubleshoot complex IAM issues across applications, gateways, directories, and federation partners.

Skills Required

• Hands-on experience across ForgeRock Identity Platform / ForgeRock Suite, including AM, IDM, DS, and IG (experience across all is preferred; strong depth in AM with exposure to others is acceptable).
• Strong IAM knowledge: SSO, federation, MFA, authorization (RBAC/ABAC), identity lifecycle, provisioning, access policies, session/token management.
• Strong Java development background (Core Java; ability to build/customize ForgeRock components and integrations).
• Strong understanding and hands-on use of IAM standards/protocols: OAuth 2.0 / OpenID Connect (OIDC), SAML 2.0, SCIM (preferred), JWT, TLS/mTLS
• Solid experience with directories/identity stores: LDAP, Active Directory, schema/attributes/groups, replication considerations, performance and troubleshooting.
• Experience with operating ForgeRock in enterprise environments: Logging, monitoring, performance troubleshooting, high availability, and production support.

Nice to Have Skills:

• AWS (EC2/EKS, ALB/NLB, CloudWatch, Secrets Manager, KMS, networking/security).
• Terraform for infrastructure provisioning and environment automation.
• Containers and orchestration: Docker, Kubernetes/OpenShift.
• CI/CD tools: Jenkins, GitHub Actions, GitLab CI.
• API gateways / reverse proxies: NGINX, Apigee, Kong, etc.

Education & Work Experience

• Bachelor's Degree
• 5+ years of experience

Title

ForgeRock IAM Engineer

Location

Jersey City, NJ

Client Industry

FinTech

Compensation

$65-80/hr

About Korn Ferry

Korn Ferry unleashes potential in people, teams, and organizations. We work with our clients to design optimal organization structures, roles, and responsibilities. We help them hire the right people and advise them on how to reward and motivate their workforce while developing professionals as they navigate and advance their careers. To learn more, please visit Korn Ferry at www.Kornferry.com