Consultant – Forge Rock Access Management (Workforce IAM)
Locations: Bangalore / Pune Hyderabad
Service Line: Cyber Security – Identity & Access Management
Experience: 4-7 Years
Position Summary
We are seeking a high-performing Consultant – Forge Rock Access Management (Workforce
IAM) with robust experience in designing, implementing, and operating Forge Rock-based
workforce identity solutions. The role involves delivering enterprise-scale identity and
access transformation programs focused on employee, contractor, and privileged user
access across hybrid and cloud environments. The selected candidate will be responsible for
hands-on configuration of Forge Rock Access Management capabilities, enabling secure SSO,
conditional/adaptive access, and MFA with emphasis on phishing-resistant authentication
(e.g., FIDO2/Web Authn/passkeys) and security hardening. You will collaborate with client
stakeholders to build Zero Trust-aligned workforce identity architectures and ensure audit-
ready controls.
Key Responsibilities :
Implement and configure Forge Rock Access Management (AM) for workforce IAM use cases (SSO, Federation, Adaptive/Conditional Access, MFA).
Design and implement Single Sign-On (SSO) for Saa S, custom, and on-prem applications using SAML 2.0, OAuth 2.0, and Open ID Connect (OIDC).
Build and manage authentication journeys using Forge Rock Authentication Trees and Nodes (including custom scripts/nodes as required).
Implement Multi-Factor Authentication (MFA) and step-up authentication policies with a focus on phishing-resistant MFA (FIDO2/Web Authn/passkeys/security keys) and controlled fallback methods.
Design contextual and risk-based access policies (device, geo, IP/network zones,behaviorsignals) aligned to Zero Trust and least privilege.
Integrate Forge Rock with enterprise directories (Active Directory/LDAP) and configure identity store, authentication modules, and mappings.
Configure federation relationships (Id P/SP), certificate/key man