What are the responsibilities and job description for the Lead ForgeRock Platform Engineer position at Aroha Technologies?
Role: Lead ForgeRock Platform Engineer
Location: San Antonio, TX
Mandatory Skills:
Identity & Access Management: ForgeRock, PingIdentity, OAuth 2.0
Programming & Frameworks: Python, Go (Golang), Java Spring Boot (facade architecture)
Infrastructure & DevOps: Terraform, Linux server maintenance (VMs), Ansible
Monitoring: Prometheus server build and setup
Job Description
Design, develop, and implement IAM solutions using the ForgeRock suite.
Configure and customize ForgeRock AM, IDM, DS, and Identity Gateway components.
Develop custom authentication modules, journeys, and authorization policies.
Integrate ForgeRock with enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and REST APIs.
Develop and maintain Java-based customizations and extensions for ForgeRock products.
Implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation solutions.
Design and implement user lifecycle management and provisioning workflows.
Troubleshoot and resolve production issues related to authentication, authorization, and identity management.
Collaborate with application teams, security architects, and infrastructure teams for IAM integrations.
Perform platform upgrades, deployments, performance tuning, and security hardening.
Create technical documentation, design documents, and operational procedures.
Follow security best practices and compliance standards.
Required Skills
ForgeRock Platform Expertise
ForgeRock Access Management (AM)
ForgeRock Identity Management (IDM)
ForgeRock Directory Services (DS)
ForgeRock Identity Gateway (IG)
Authentication Trees/Journeys
Authorization Policies
Intelligent Access
Identity Governance concepts
Java Development
Core Java (Java 8/11/17)
J2EE Technologies
Spring Framework / Spring Boot
RESTful Web Services
Maven, Gradle
JSON, XML
Microservices Architecture
IAM & Security
Single Sign-On (SSO)
Multi-Factor Authentication (MFA)
OAuth 2.0
OpenID Connect (OIDC)
SAML 2.0
LDAP
JWT
PKI and Certificate Management