> Markdown version of [/jobs/ext/622491-senior-iam-engineer-forgerock](https://www.wearedevelopers.com/jobs/ext/622491-senior-iam-engineer-forgerock). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior IAM Engineer - ForgeRock - **Company:** Ensono - **Location:** Downers Grove, IL, United States (Remote available) - **Experience:** Expert - **Salary:** $125,000.0 - $162,000.0 - **Contract:** Permanent contract - **Skills:** Java (Programming Language), JavaScript (Programming Language), Active Directory, Application Programming Interfaces (APIs), Application Performance Management, Software Suite, Systems Engineering, Command-Line Interface, Databases, DevOps, Multi-Factor Authentication, Groovy, Identity and Access Management, Java Virtual Machine (JVM), JSON, Lightweight Directory Access Protocols (LDAP), Linux Servers, OAuth, OpenID, Ping (Networking Utility), Software Maintenance, Openid Connect, Azure Active Directory, Zero Trust Network Access, Runbook, Security Assertion Markup Language (SAML), Shell Script, Single Sign-On, System Availability, Git, HR Software, Containerization, Kubernetes, Deployment Automation, Docker, Jenkins - **Published:** June 24, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=2f896b8a75f11c12 ## About the Role * Experience: 6+ years of dedicated professional experience in Identity & Access Management (IAM), with at least 2+ years specialized in the ForgeRock ecosystem. * ForgeRock Core: Proven mastery of ForgeRock AM, IDM, DS, and IG components, configuration files, and properties. * Protocols: Deep understanding of core identity security standards including OAuth 2.0, OpenID Connect (OIDC), SAML 2.0, and LDAP. * Languages: Proficiency writing production-grade scripts in Groovy, JavaScript, or Java. * Environments: Comfortable operating within Linux Server ecosystems, command-line interfaces, and shell scripting. Preferred Qualifications * Certifications: ForgeRock Certified Access Management Specialist, Identity Management Specialist, or Ping Identity equivalent certifications. * DevOps Skills: Hands-on familiarity using Git version control, Jenkins, Docker, or Kubernetes clusters. ## Description We are seeking a skilled ForgeRock Senior IAM Engineer to oversee the day-to-day administration, operational maintenance, and custom expansion of our Identity and Access Management platform. In this role, you will ensure high availability and optimal performance of the ForgeRock environment while actively developing custom scripts, authentication journeys, and plugins to meet evolving business needs. You will act as the bridge between core system engineering and day-to-day identity operations, maintaining platform stability and implementing custom configurations., Application Maintenance & Performance * Monitor platform health across the ForgeRock software suite including Access Management (AM), Identity Management (IDM), Directory Services (DS), and Identity Gateway (IG). * Manage system upgrades, critical security patches, and hotfix deployments with minimal disruption to business operations. * Maintain directory integrations ensuring steady synchronization between ForgeRock components and connected enterprise systems like Active Directory, Azure AD/Entra ID, and HR systems. * Optimize system capacity by tuning JVM, database connectors, and LDAP server performances to meet service level agreements (SLAs). Operational Support & Triage * Provide L3 technical support to resolve complex identity federation, single sign-on (SSO), and authentication routing incidents. * Conduct root cause analysis on system failures, application performance drops, or certificate expirations, implementing permanent remediation steps. * Oversee backup and disaster recovery protocols, verifying snapshot integrity for all identity data and configurations. * Maintain technical documentation including operational standard operating procedures (SOPs), runbooks, and environment architecture diagrams. Custom Configuration & Engineering * Build custom authentication scripts and logic plugins utilizing Java, JavaScript, or Groovy to address advanced access use cases. * Configure authentication journeys incorporating multi-factor authentication (MFA), risk-based conditional access, and Zero Trust validation policies. * Develop JSON-based route profiles within ForgeRock Identity Gateway to enforce policy controls for legacy applications and microservice APIs. * Automate deployment workflows using CI/CD pipelines and infrastructure-as-code blueprints within Docker or Kubernetes container environments. ## Related Videos - [Keeping applications secure by evolving OAuth 2.0 and OpenID Connect](https://www.wearedevelopers.com/videos/100152-keeping-applications-secure-by-evolving-oauth-2-0-and-openid-connect) - [How a Small Team Shrank a Microsoft Monorepo by 94%](https://www.wearedevelopers.com/videos/1236-how-a-small-team-shrank-a-microsoft-monorepo-by-94) - [Tips and Tricks for Working with JSON](https://www.wearedevelopers.com/videos/1229-tips-and-tricks-for-working-with-json) - [Our GitOps approach for deploying an Identity Provider and an API Gateway in a SaaS company](https://www.wearedevelopers.com/videos/776-our-gitops-approach-for-deploying-an-identity-provider-and-an-api-gateway-in-a-saas-company) - [Delay the AI Overlords: How OAuth and OpenFGA Can Keep Your AI Agents from Going Rogue](https://www.wearedevelopers.com/videos/1637-delay-the-ai-overlords-how-oauth-and-openfga-can-keep-your-ai-agents-from-going-rogue) - [Git for Code Reviews](https://www.wearedevelopers.com/videos/429-git-for-code-reviews) ## Related Articles - [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs) - [Highest Paying Tech Companies for Developers](https://www.wearedevelopers.com/magazine/220-highest-paying-tech-companies-for-developers) - [The Best X (Twitter) Accounts for Developers](https://www.wearedevelopers.com/magazine/294-the-best-x-twitter-accounts-for-developers) - [Find a Developer Job: 12 Best Job Sites For Developers](https://www.wearedevelopers.com/magazine/165-find-a-developer-job-12-best-job-sites-for-developers) - [Is Software Engineering Over-Saturated?](https://www.wearedevelopers.com/magazine/418-is-software-engineering-over-saturated) - [Why Attend a Developer Event in 2026?](https://www.wearedevelopers.com/magazine/688-why-attend-a-developer-event-in-2026)