Access Management Engineer

We are looking for an experienced Java IAM Developer with strong expertise in ForgeRock and OpenAM to design, develop, integrate, and support enterprise Identity and Access Management solutions. The ideal candidate will have hands-on experience with Java, authentication and authorization protocols, IAM platforms, API integration, and identity lifecycle management.

Design, develop, configure, and maintain enterprise IAM solutions using ForgeRock/OpenAM. Develop and customize IAM components using Java, Java EE, REST APIs, and scripting. Configure and implement ForgeRock Access Management (AM/OpenAM) for authentication and authorization. Implement SSO, MFA, OAuth 2.0, OpenID Connect, and SAML integrations. Develop authentication journeys, policies, trees, scripts, and custom authentication modules. Integrate IAM platforms with enterprise applications, APIs, databases, and directory services. Work with LDAP/Active Directory for identity authentication and user management. Implement RBAC, access policies, session management, and authorization controls. Develop and consume RESTful APIs for IAM integrations.

Troubleshoot authentication, authorization, SSO, token, and integration issues. Support IAM deployments across development, QA, staging, and production environments. Collaborate with security, application development, DevOps, and infrastructure teams. Participate in IAM platform upgrades, migrations, performance tuning, and production support. Follow security best practices for identity, access, tokens, credentials, and sensitive information.

Required skills: Strong programming experience in Java. Hands-on experience with ForgeRock AM / OpenAM. Strong understanding of Identity and Access Management (IAM) concepts. Experience with OAuth 2.0, OpenID Connect (OIDC), SAML, and SSO. Experience with REST APIs and web services. Strong knowledge of LDAP / Active Directory. Experience with authentication, authorization, access policies, and session management. Knowledge of JSON, XML, HTTP/HTTPS, and API integration. Experience with Git, Maven/Gradle, and CI/CD pipelines. Strong debugging, troubleshooting, and problem-solving skills.

Preffered skills Experience with ForgeRock Identity Management (IDM) and Directory Services (DS). Experience developing ForgeRock authentication trees/journeys and scripted nodes. Knowledge of Java Spring / Spring Boot. Experience with JWT, access tokens, refresh tokens, and token validation. Experience integrating IAM with cloud platforms such as AWS or Azure. Knowledge of Docker/Kubernetes and cloud-native IAM deployments. Experience with IAM migration or modernization projects. Familiarity with DevOps tools such as Jenkins, GitLab, or GitHub Actions.

Java | ForgeRock | OpenAM | ForgeRock AM | ForgeRock IDM | ForgeRock DS | IAM | SSO | OAuth 2.0 | OpenID Connect | SAML | LDAP | Active Directory | REST API | JavaScript/Groovy | JWT | Spring Boot | Git | Maven | CI/CD

Bachelor's degree in Computer Science, Information Technology, Engineering, or a related field preferred.

KEY WORDS: Java + ForgeRock/OpenAM + IAM

For applications and inquiries,