Senior ForgeRock Architect - EPAM Systems

If you are an experienced ForgeRock Architect looking for a high-impact role with a global leader in digital transformation, EPAM is the perfect next step in your career! As an EPAMer, you’ll have the opportunity to work with a supportive team, on a variety of interesting projects for some of the biggest brands in the world. Are you ready for the next step in your career journey? Apply now!

Responsibilities

• Deliver services in a direct capacity on IAM ForgeRock engagements

• Engage in requirements gathering and use case development

• Generate, validate, and justify security solutions and designs consistent with client objectives and best practices

• Develop deployment and implementation methodology and standards consistent with vendor best practices Install, integrate, configure, and deploy IAM solutions and systems to facilitate User Life-Cycle Management, Identity and Access Governance, Automated Provisioning, Single Sign-On, Federation, Privileged Account Management

• Transcribe and present technical information to business / executive levels

• Design and implement solutions using ForgeRock Identity Management (OpenIDM) for user lifecycle management, including provisioning, reconciliation, and synchronization

• Configure and manage ForgeRock Access Management (OpenAM) for authentication, authorization, federation, and single sign-on (SSO) capabilities

• Maintain ForgeRock Directory Services (OpenDJ) for high-performance directory access and storage

• Utilize the ForgeRock Backstage Portal for support, documentation, and community engagement

• Develop custom scripts and connectors for integration with various applications and systems

• Monitor system performance, conduct regular audits, and provide optimization recommendations

• Collaborate with cross-functional teams to understand business requirements and translate them into technical specifications

• Ensure compliance with security policies and standards, including regular updates and patches

• Provide technical support and troubleshooting for ForgeRock-related issues

• Document technical processes, configurations, and procedures for knowledge sharing and compliance

Requirements

• 8+ years of hands-on experience in Identity and Access Management implementation using ForgeRock IAM suite, including OpenIDM, OpenAM, OpenDJ, Master. and SSO Admin

• Ability to troubleshoot support requests with minimal guidance

• Experience with light admin/support for Linux (Redhat), Windows Oss, and Tomcat

• Understanding of and ability to write basic Linux shell and Windows PowerShell scripts

• Enjoys interacting in ITSM environment and using related tools (ServiceNow or similar)

• Hands-on experience working in Controlled Change Management/Deployment environments (supporting SDLC process)

• Strong understanding of identity and access management principles and technologies

• Knowledge of LDAP, SSO, OAuth, SAML, and RESTful APIs

• Familiarity with directory services concepts and protocols

Benefits

• Medical, Dental and Vision Insurance (Subsidized)

• Health Savings Account

• Flexible Spending Accounts (Healthcare, Dependent Care, Commuter)

• Short-Term and Long-Term Disability (Company Provided)

• Life and AD&D Insurance (Company Provided)

• Employee Assistance Program

• Unlimited access to LinkedIn learning solutions

• Matched 401(k) Retirement Savings Plan

• Paid Time Off – the employee will be eligible to accrue 15-25 paid days, depending on specific level and tenure with EPAM (accrual eligibility may change over time)

• Paid Holidays - nine (9) total per year

• Legal Plan and Identity Theft Protection

• Accident Insurance

• Employee Discounts

• Pet Insurance

• Employee Stock Purchase Program

• If otherwise eligible, participation in the discretionary annual bonus program

• If otherwise eligible and hired into a qualifying level, participation in the discretionary Long-Term Incentive (LTI) Program