Need urgent supply for Dev Ops Security Engineer Customer IAM -Forge Rock Identity Platform CIAM

Only early joiners !

RJC #194309

Band - B3/C1- 7+ Years

Budget- 30-36LPA

Exp: 7 to 12 Yrs

Location - UBS, Pune(Kharadi)/Hyderabad from customer location

3 days a week from WFO.

Mandatory Skills :

Dev SecOps / Dev Ops with Security + Forge Rock

CIAM (Customer Identity & Access Management) experience - mandate

Any IAM (Identity & Access Management) tool such as :

Okta, Forge Rock, Ping Identity, Azure AD/Entra ID, Sail Point, or similar platforms

Dev Ops Security Engineer Customer IAM -Forge Rock Identity Platform CIAM

Your role

We're looking for a hands-on Security Dev Ops Engineer to support our Customer Identity & Access Management platform, helping us securely deliver and scale authentication services for internet-facing applications that serve millions of users. This role sits at the intersection of Dev Ops, platform security, and CIAM-focused on automating secure deployments and protecting public-facing APIs and services.

Partner with Senior SMEs in and outside CIAM Team to successfully execute and deliver the vision and priorities of your POD.

Contribute to the CIAM technical vision and strategy and support the development of architecture and engineering capabilities within the team

Act as individual contributor for the delivery of your POD, ensuring that services are implemented, delivered and operated at the required quality standards..

Your team

You'll be working in the Customer Identity & Access Management Team which is part of Identity & Access Management. This role specifically is aligned with our External Authentication products which provide solutions for UBS clients globally.



Our team consists of highly skilled technical experts across the globe. Your team has an amazing prospect to make significant positive impact to UBS, our clients and our stakeholders.

Your expertise

5. CIAM Deployment & Operations

Build and operate highly available CIAM infrastructure and applications using IaC.

Automate the deployment and configuration of identity services (e.g., Transmit Security, Azure AD B2C, Auth0, Forge Rock, etc.).

Integrate reverse proxies, WAFs (e.g., F5, Azure Front Door), and API gateways for internet-facing identity endpoints.

Deploy and manage secure CIAM workloads in Azure (App Services, Kubernetes, Azure Functions, Key Vault, App Gateway).

6. Security Engineering & Hardening

Implement and enforce secure defaults for CIAM components (e.g., rate limiting, MFA enforcement, token protection).

Automate secrets management and certificate rotation for CIAM services and dependencies.

Integrate identity protection signals (risk-based access, fraud detection) with application workflows.

Monitor infrastructure using native and bespoke tools and building custom dashboards for Engineering and Operations duties.

7. Dev Ops & CI/CD

Harden CI/CD pipelines for CIAM service delivery, including shift-left security scanning.





Create reusable deployment patterns and modules for secure multi-region or multi-tenant CIAM deployments.

Support developers in securely integrating with OAuth2, OIDC, SAML, and federation patterns.

8. Collaboration & Incident Support

Participate in security reviews for new customer-facing features or identity integrations.

Act as an SME in CIAM-related incident response and postmortem analysis.

Collaborate with product, development, and compliance teams to align on secure identity practices.

Required Qualifications

8+ years in Dev Ops, Cloud Engineering, or Platform Security roles, ideally with CIAM experience.

Hands-on experience with public cloud deployments (Azure preferred) and CI/CD automation.

Deep understanding of internet-facing app security: TLS, WAFs, reverse proxies, JWT/OAuth token handling.

Strong experience with infrastructure as code and scripting (Python, Power Shell, Bash).

Familiarity with modern identity standards (OAuth2, OIDC, SAML) and threat models.

Experience managing authentication and authorization services at scale for external users.

Preferred Qualifications

Experience with CIAM platforms like Transmit, Forge Rock, Auth0, Ping, or Azure AD B2C.

Understanding of Zero Trust architectures.

Familiarity with DDoS mitigation and secure web gateway integration.

Exposure to cloud-native observability stacks and runtime security.

Azure and IT security certifications.

Candidates should have relevant CIAM (Customer Identity & Access Management) experience, along with hands-on experience in any IAM (Identity & Access Management) tool such as Okta, Forge Rock, Ping Identity, Azure AD/Entra ID, Sail Point, or similar platforms. Forge Rock is not Mandatory

📌 DevOps Security Engineer – Customer IAM -ForgeRock Identity Platform CIAM - Wipro (India)
🏢 Objectwin Technology India
📍 India