Sr. Engineer, Authentication

lplfinancial; Fort Mill (SC); On-site; USD 101,000 - 168,000; Full time

Job summary

LPL Financial seeks a Sr. Engineer, Authentication to engineer and maintain our IAM platform using PingOne Advanced Identity Cloud and ForgeRock.

You will partner with security architects, product owners, and stakeholders to design robust authentication and IGA solutions and guide IAM strategy and implementation across production systems. The role demands hands-on expertise with ForgeRock suites, PingOne, and passwordless technologies, with a focus on performance, reliability, and scalable

Qualifications

• Minimum 5 years of Identity & Access Management experience.
• Minimum 5 years of using ForgeRock products (AM, IDM, DS, CTS).
• Minimum 3 years of ForgeRock Identity Cloud configuration and development.
• Minimum 2 years of experience with Transmit Security passwordless solution.
• Minimum 5 years of SAML and OAuth configuration.
• Minimum 5 years of IAM solution design, integration architecture, and deployment.

Responsibilities

• Design and deliver IAM authentication and IGA solutions with vendor/internal teams.
• Collaborate with security architects to shape the IAM roadmap.
• Ensure standards for current and future IAM implementations.
• Provide solutions with Product owner and stakeholders for gaps.

Skills

IAM

OpenID Connect

OAuth 2.0

SAML

Linux

UNIX shell scripting

JavaScript

Tools

ForgeRock AM

ForgeRock IDM

ForgeRock DS

ForgeRock CTS

PingOne Identity

Transmit Security Passwordless

Job description

Where Ambition Meets Innovation

Build a career that matches all your initiative with an impressive dose of innovation. From cutting‑edge resources and a collaborative environment to the freedom to make an impact and more, you\'ll find the ingredients you need at LPL Financial to shape your success while helping clients pursue their financial goals.

Job Overview:

LPL\'s Identity & Access Management Engineering organization is looking for talented professionals to join a high-performing team that is charged with developing, supporting and enhancing our Authentication and Authorization Solutions Engineering team. As an Sr. Engineer, Authentication , this position will be a primary technical resource tasked with engineering and maintaining our Identity and Access Management platform with PingOne Advanced Identity Cloud and ForgeRock product suite. The individual will have the opportunity to help shape the future direction and use of the applications as they are currently deployed at the LPL. This role will provide thought leadership, professional support, and valued contributions to a range of production support, development, and project activities. We are looking for an experienced professional, who has a breadth of knowledge and skills across various technical acumens, along with an understanding of industry best practices. The right person will develop a deep understanding of the platforms usage and consumption, continuously advocate for automation and process efficiency, and where necessary challenge and influence management to take actions to appropriately utilize the systems.

Responsibilities:

• Responsible for working with the vendor partners or internal teams to design and deliver IAM authentication and IGA solutions.
• Collaborate with the security architects to help creating/maintaining the IAM roadmap at the LPL.
• Work with the teams to ensure standards are being followed for current and future IAM implementations.
• Work with Product owner and stakeholders to provide solutions or address any gaps in the current implementation.
• Responsible for installing, configuring, customizing, and maintaining the Identity and Access Management products.
• Responsible for the overall performance and stability of the applications built using the Identity and Access Management products.
• Responsible for mentoring and providing guidance to the other team members.

What are we looking for?

We want strong collaborators who can deliver a world-class client experience . We are looking for people who thrive in a fast-paced environment, are client-focused, team oriented , and can execute in a way that encourages creativity and continuous improvement .

Requirements:

• Minimum 5 years of experience in Identity & Access Management.
• Minimum 5 years of using ForgeRock products mandatory.
• Minimum 5 years of experience of using ForgeRock AM, IDM, DS and CTS in on premise setup and development.
• Minimum 3 years of experience in ForgeRock Identity Cloud configuration and development.
• Minimum 2 year of experience with Transmit Security passwordless solution.
• Minimum 5 years of experience of single sign of configuration using SAML and oAuth.
• Minimum 5 years of solution design, integration architecture, technical development, and deployment experience of IAM solutions and products preferably ForgeRock/PingOne Identity Platform products.

Core Competencies:

• Expert in development of authentication journey, self-service etc.
• Clear understanding and working knowledge of Open ID Connect and oAuth 2.
• Minimum 3 years of experience in using databases, application servers, Web servers, Linux Operating System.
• Minimum 3+ years of experience in using scripting languages like UNIX shell scripting, Ruby, java script etc.
• Experience in installing, configuring, customizing and performance tuning of Identity manager, Access Manager and Directory Server.
• Experience in cluster management, monitoring, troubleshooting, and backup and recovery processes.
• Working experience in disaster recovery activities between data centers.
• Proven track record of successful IAM implementations and support of those applications.
• Strong decision-making capabilities, with a proven ability to weigh the relative costs and benefits of potential actions and identify the most appropriate actions.
• Organizational skills that enable one to work on several tasks simultaneously, providing management with appropriate insight into the workload and priorities.
• Original and innovative thinking that produces new ideas and creates innovative solutions.
• Demonstrated ability to develop and implement process improvement initiatives.

Preferences:

• Working knowledge of DevOps (Octopus, GitHub) is a plus.

Pay Range:

$100,631.00 - $167,787.00

Actual base salary varies based on factors, including but not limited to, relevant skill, prior experience, education, base salary of internal peers, demonstrated performance, and geographic location. Additionally, LPL Total Rewards packa