> Markdown version of [/jobs/ext/1741969-forgerock-identity-architect](https://www.wearedevelopers.com/jobs/ext/1741969-forgerock-identity-architect). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ForgeRock Identity Architect

- **Company:** Qode View all jobs
- **Location:** Atlanta, CO, United States
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Java (Programming Language), Amazon Web Services, Microsoft Azure, Cloud Computing, Continuous Integration, Software Debugging, Groovy, Key Management, Lightweight Directory Access Protocols (LDAP), Automation of Marketing, OAuth, OpenID, Ping (Networking Utility), X.509, Azure Active Directory, Security Assertion Markup Language (SAML), Session Management, Systems Integration, Okta, System Availability, Api Design, Restful APIs, Api Management
- **Published:** July 3, 2026
- **Apply:** https://www.careerjet.com/jobad/us1b5b2038786bec16d8fcc6c369938ac9

## About the Role

* 4+ years hands-on ForgeRock Access Manager (AM)
 * Strong SAML 2.0 (debugging raw assertions), OIDC/OAuth 2.0
 * Experience with ForgeRock REST APIs, scripted nodes, and keystore/X.509 management
 * API design & integrations, LDAP, secrets management (AWS/Vault)
 * Coding: Java/Groovy + CI/CD, API testing, SAML debugging tools

Nice to Have

 * ForgeRock IDM, SCIM 2.0, cloud (AWS/Azure/GCP)
 * Experience with Okta / Entra / Ping as IDP
 * Migration of manual SP setups to programmatic model

## Description

Join a high-impact POD building a self-service federated SSO platform. You'll be the hands-on ForgeRock expert designing and engineering a scalable identity broker integrating with Okta, Microsoft Entra ID, PingIdentity, and more. This is a build-from-scratch, code-heavy role-not admin/config.
Key Responsibilities

 * Design multi-tenant ForgeRock AM federation architecture
 * Build REST APIs for programmatic SAML SP connection lifecycle (create/validate/activate)
 * Implement SAML/OIDC flows, assertion validation, and secure session management across apps
 * Develop scripted authentication (Groovy/JS) and automate certificate lifecycle (monitoring & rotation)
 * Enable break-glass fallback, ensure high availability, and prepare SCIM-ready architecture
 * Migrate existing manual SP connections to automated framework


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company)
- [Advanced Cypress: custom assertions and tasks](https://www.wearedevelopers.com/videos/790-advanced-cypress-custom-assertions-and-tasks)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)

## Related Articles

- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Dev Digest 120 - Apple and peers](https://www.wearedevelopers.com/magazine/455-dev-digest-120-apple-and-peers)
- [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)
- [WeAreDevelopers Dev Digest Issue 116 - The new search wars…](https://www.wearedevelopers.com/magazine/445-wearedevelopers-dev-digest-issue-116-the-new-search-wars)
- [Dev Digest 139 - Soft and hard queries](https://www.wearedevelopers.com/magazine/487-dev-digest-139-soft-and-hard-queries)