> Markdown version of [/jobs/ext/219956-forgerock-iam-engineer](https://www.wearedevelopers.com/jobs/ext/219956-forgerock-iam-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# ForgeRock IAM Engineer

- **Company:** Global Information Technologies LLC
- **Location:** Princeton, NJ, United States
- **Experience:** Expert
- **Salary:** $93,600.0 - $110,240.0
- **Contract:** Temporary to permanent
- **Skills:** Active Directory Federation Services, User Authentication, Multi-Factor Authentication, Identity and Access Management, Lightweight Directory Access Protocols (LDAP), OAuth, OpenID, Openid Connect, Azure Active Directory, RSA (Cryptosystem), Runbook, Security Assertion Markup Language (SAML), Systems Integration, Software Vulnerability Management, Cloud Integration, Legacy Systems
- **Published:** May 17, 2026
- **Apply:** https://www.careerjet.com/jobad/us42322addd84147dfd7ea2edb874fab6d

## About the Role

* ForgeRock Suite: 8+ years of deep hands-on experience with ForgeRock AM (specifically Authentication Trees), IDM, and DS.
 * Protocols: Expert-level understanding of SAML 2.0, OAuth 2.0, and OpenID Connect (OIDC).
 * Cloud Integration: Proven experience integrating ForgeRock with Microsoft Entra ID / Azure AD in a multi-IdP enterprise environment.
 * Legacy Systems: Familiarity with integrating or migrating from systems like RSA, ADFS, and traditional LDAP directories.

## Description

The ForgeRock IAM Engineer will design, configure, and support the ForgeRock Identity Platform within a complex workforce environment. This role is a critical technical anchor for the organization's identity transformation, enabling seamless federation with Microsoft Entra ID and managing a phased migration of legacy and modern applications toward a unified cloud-entry point.
Key Responsibilities

 * Engineering & Support: Provide hands-on engineering for the full ForgeRock stack (AM, IDM, DS), including enhancements, complex integrations, and high-level production support.
 * Modernization & Migration: Implement and support ForgeRock Microsoft Entra ID (Azure AD) federation. Define coexistence strategies for applications transitioning to Entra ID.
 * Advanced Auth Design: Design and maintain intricate Authentication Trees, access policies, and identity provisioning workflows tailored to business requirements.
 * Vulnerability Management: Own the remediation lifecycle for ForgeRock components-analyzing findings, applying security patches, and implementing hardened configurations.
 * Operational Excellence: Manage L2/L3 escalations (SSO failures, sync issues, performance bottlenecks), certificate/secret rotations, and platform upgrades with minimal business impact.
 * Cross-Functional Collaboration: Partner with Infrastructure, Security, and App teams to provide technical documentation, runbooks, and audit evidence., Job Title: Senior MFA (Multi-Factor Authentication) Engineer Multiple Locations: Princeton, NJ or Quincy, MA (100% onsite in any of these locations) Duration: 6 months (extendabl…
 + 1 day ago


## Related Videos

- [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect)
- [Delegating the chores of authenticating users to Keycloak](https://www.wearedevelopers.com/videos/1558-delegating-the-chores-of-authenticating-users-to-keycloak)
- [Technical Documentation - How Can I Write Them Better and Why Should I Care?](https://www.wearedevelopers.com/videos/681-technical-documentation-how-can-i-write-them-better-and-why-should-i-care)
- [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue)
- [Get started with securing your cloud-native Java microservices applications](https://www.wearedevelopers.com/videos/123-get-started-with-securing-your-cloud-native-java-microservices-applications)
- [Bridging AI and Nomad: a Go-based MCP Server for Cluster Control](https://www.wearedevelopers.com/videos/2063-bridging-ai-and-nomad-a-go-based-mcp-server-for-cluster-control)

## Related Articles

- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers)
- [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)
- [What Makes WeAreDevelopers World Congress Different From Every Other Tech Event?](https://www.wearedevelopers.com/magazine/701-what-makes-wearedevelopers-world-congress-different-from-every-other-tech-event)
- [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline)
- [Everything a Developer Needs to Know About MCP with Neo4j](https://www.wearedevelopers.com/magazine/604-everything-a-developer-needs-to-know-about-mcp-with-neo4j)