What are the responsibilities and job description for the Sr Forgerock Platform Engineer position at Unisoft Technology Inc?
Mandatory Skills:
- Identity & Access Management: ForgeRock, PingIdentity, OAuth 2.0
- Programming & Frameworks: Python, Go (Golang), Java Spring Boot (facade architecture)
- Infrastructure & DevOps: Terraform, Linux server maintenance (VMs), Ansible
- Monitoring: Prometheus server build and setup
Job Description
- Design, develop, and implement IAM solutions using the ForgeRock suite.
- Configure and customize ForgeRock AM, IDM, DS, and Identity Gateway components.
- Develop custom authentication modules, journeys, and authorization policies.
- Integrate ForgeRock with enterprise applications using SAML 2.0, OAuth 2.0, OpenID Connect (OIDC), LDAP, and REST APIs.
- Develop and maintain Java-based customizations and extensions for ForgeRock products.
- Implement Single Sign-On (SSO), Multi-Factor Authentication (MFA), and federation solutions.
- Design and implement user lifecycle management and provisioning workflows.
- Troubleshoot and resolve production issues related to authentication, authorization, and identity management.
- Collaborate with application teams, security architects, and infrastructure teams for IAM integrations.
- Perform platform upgrades, deployments, performance tuning, and security hardening.
- Create technical documentation, design documents, and operational procedures.
- Follow security best practices and compliance standards.
Required Skills
- ForgeRock Platform Expertise
- ForgeRock Access Management (AM)
- ForgeRock Identity Management (IDM)
- ForgeRock Directory Services (DS)
- ForgeRock Identity Gateway (IG)
- Authentication Trees/Journeys
- Authorization Policies
- Intelligent Access
- Identity Governance concepts
- Java Development
- Core Java (Java 8/11/17)
- J2EE Technologies
- Spring Framework / Spring Boot
- RESTful Web Services
- Maven, Gradle
- JSON, XML
- Microservices Architecture
- IAM & Security
- Single Sign-On (SSO)
- Multi-Factor Authentication (MFA)
- OAuth 2.0
- OpenID Connect (OIDC)
- SAML 2.0
- LDAP
- JWT
- PKI and Certificate Management