IAM AVP: ForgeRock CIAM Engineer & Automation Lead

State Street; Jersey City (NJ); On-site; USD 100,000 - 168,000; Full time

Benefits offered by this job

401K with company match

Health insurance

Paid time off

Employee Assistance Program

Job summary

State Street in New Jersey is seeking a hands-on IAM Engineer to lead CIAM initiatives. You will drive lifecycle management for IGA using ForgeRock, design scalable IAM solutions, and mentor junior engineers in a fast-paced security environment.

This role requires strong IAM knowledge, proficiency with SAML/OIDC, RBAC, REST, and cloud platforms (Azure, AWS), plus collaboration with IT and security teams to ensure compliant, reliable identity services.

Qualifications

• Strong understanding of IAM principles including provisioning, de-provisioning, RBAC, and least privilege.
• Experience with cloud platforms (Azure, AWS) and hybrid identities.
• Familiarity with SAML, OAuth, OpenID Connect, LDAP/Active Directory, REST/SCIM.

Responsibilities

• Manage lifecycle management integrations for IGA using ForgeRock. Drive planning, design, and execution of IAM projects to achieve program objectives.
• Design and implement IAM solutions and automation accelerators for efficiency and scalability.
• Analyze and troubleshoot IAM issues; perform root-cause analyses to prevent recurrence.
• Collaborate with IT, security, and business units to extend IAM controls across assets.
• Monitor IAM operations to ensure performance and SOP compliance; mentor junior engineers.
• Create and maintain knowledge articles, architecture diagrams, and SOPs for IAM infrastructure.

Skills

IAM principles

Provisioning

RBAC

SAML/OIDC

Cloud platforms

Tools

ForgeRock

Okta

CyberArk

Ping

SCIM

Job description

State Street in New Jersey is seeking a hands-on IAM Engineer to lead CIAM initiatives. You will drive lifecycle management for IGA using ForgeRock, design scalable IAM solutions, and mentor junior engineers in a fast-paced security environment.

This role requires strong IAM knowledge, proficiency with SAML/OIDC, RBAC, REST, and cloud platforms (Azure, AWS), plus collaboration with IT and security teams to ensure compliant, reliable identity services.