Project Role : Security Architect Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.

Must have skills : ForgeRock Identity Management Good to have skills : ForgeRock Access Management Minimum 5 Year(s) Of Experience Is Required Educational Qualification : 15 years full time education Summary As a Lead ForgeRock Engineer, you will serve as the Subject Matter Expert (SME) for our global Identity and Access Management platform. You will be responsible for the a high-level orchestration, and security governance of the ForgeRock stack (AM, IDM, DS, IG). You will bridge the gap between business requirements and technical execution, leading a team of junior and mid-level administrators Key Responsibilities Platform Administration & Health Maintenance: Perform system upgrades, patches, and version migrations for PingAM, PingIDM, and PingDS.

Monitoring: Use tools like Splunk, ELK, or Prometheus to monitor system health, log rotation, and performance bottlenecks.

Directory Management: Manage LDAP schemas, indexes, and replication in Directory Services (DS) to ensure data consistency.

Identity Lifecycle & Integration App Onboarding: Configure SAML 2.0, OIDC, and OAuth2 integrations to enable Single Sign-On (SSO) for new applications.

Provisioning: Build and manage reconciliation/sync jobs in IDM to automate user onboarding and offboarding from HR systems (like Workday) to Active Directory.

Policy Enforcement: Create and maintain authorization policies and Authentication Trees (Journeys) to enforce MFA and adaptive risk-based security.

Security & Compliance Governance:



Implement Role-Based Access Control (RBAC) and ensure the principle of least privilege is followed.

Auditing: Generate reports for compliance (SOX, GDPR, HIPAA) showing who has access to what and when.

Incident Response: Troubleshoot login failures, session timeouts, and synchronization errors.

Modern DevOps Tasks Automation: Use Groovy or JavaScript to write custom scripts for authentication nodes or IDM triggers.

IaC: Manage environment configurations using Terraform or Ansible and deploy via CI/CD pipelines.where applicable). Governance, Security & Mentorship Compliance: Ensure the platform meets global standards (GDPR, SOX, HIPAA) through robust audit logging and automated access reviews.

Mentorship: Lead a team of 3 5 IAM engineers, providing code reviews, technical guidance, and certification support Qualified & Technical Skills ForgeRock & CIAM :

- Deep knowledge of AM (Access), IDM (Identity), DS (Directory), and IG (Gateway). Identity & Security :
- OAuth 2.0

OpenID Connect (OIDC)

SAML 2.0

JWT, REST APIs

LDAP / directory services Scripting :

- Java, JavaScript / Groovy (ForgeRock scripting)

API security patterns

Linux / Unix environments

CI/CD and DevSecOps exposure Additional functional experience :

- ForgeRock Identity Gateway (IG)

Cloud platforms (AWS / Azure / GCP)

Docker, Kubernetes

ForgeRock or IAM certifications

Experience with CIAM migrations (Ping, Okta, custom IAM) Additional Information: Bachelors and above degree in Computer Science, Information Technology, MIS, Engineering / Bachelor or college degree in related field or equivalent work experience (Full time).

The candidate should have minimum 5 years of experience in ForgeRock Identity Management & overall 10+ years overall IT experience Certifications ForgeRock FRX-AM-CSE Certified

📌 Security Architect (Bengaluru)
🏢 Accenture in India
📍 Bengaluru