IAM Architect

Job Title: ForgeRock IAM Developer/Engineer Location: Jersey City, NJ Duration: Contract - 6 months Pay Range: $68/hr $72/hr (W2) About OpenKyber OpenKyber is a leading global IT consulting and workforce solutions firm providing services and support to Fortune 500 and government clients. Founded in 1998, OpenKyber has grown with our customers needs into a full-service business solutions provider. With delivery centers and offices across North America and India, we take pride in building long-term relationships and delivering excellence through innovation, collaboration, and integrity.

We are seeking a ForgeRock IAM Developer/Engineer with strong IAM fundamentals and a solid Java background to design, build, and support enterprise identity and access solutions across the ForgeRock Identity Platform (AM, IDM, DS, IG, and related components). AWS and Terraform experience is a plus.

• Design, implement, and support solutions across the ForgeRock Identity Platform, including: ForgeRock AM (Access Management): authentication trees/journeys, MFA, SSO, federation, sessions, policies, agents
• ForgeRock IDM (Identity Management): provisioning, workflows, connectors, reconciliation, managed objects, REST integrations
• ForgeRock DS (Directory Services): LDAP schema, replication, performance tuning, indexes, access controls
• ForgeRock IG (Identity Gateway): routing, filtering, authorization enforcement, policy integration, protected apps/APIs
• ForgeRock Identity Cloud / Autonomous Identity (if applicable): SaaS configuration, governance/insights use cases
• Build custom extensions and integrations using Java, scripting, and REST APIs (connectors, custom nodes, scripts, integrations).
• Implement federation and API security patterns using OAuth2/OIDC, SAML2, JWT, and secure token/session management.
• Support CI/CD, environment promotion, and configuration management (automation, deployment consistency).
• Troubleshoot complex IAM issues across applications, gateways, directories, and federation partners.

• Hands-on experience across ForgeRock Identity Platform / ForgeRock Suite, including AM, IDM, DS, and IG (experience across all is preferred; strong depth in AM with exposure to others is acceptable).
• Strong IAM knowledge: SSO, federation, MFA, authorization (RBAC/ABAC), identity lifecycle, provisioning, access policies, session/token management.
• Strong Java development background (Core Java; ability to build/customize ForgeRock components and integrations).
• Strong understanding and hands-on use of IAM standards/protocols: OAuth 2.0 / OpenID Connect (OIDC), SAML 2.0, SCIM (preferred), JWT, TLS/mTLS
• Solid experience with directories/identity stores: LDAP, Active Directory, schema/attributes/groups, replication considerations, performance and troubleshooting.
• Experience with operating ForgeRock in enterprise environments: Logging, monitoring, performance troubleshooting, high availability, and production support.

• AWS (EC2/EKS, ALB/NLB, CloudWatch, Secrets Manager, KMS, networking/security).
• Terraform for infrastructure provisioning and environment automation.
• Containers and orchestration: Docker, Kubernetes/OpenShift.
• CI/CD tools: Jenkins, GitHub Actions, GitLab CI.
• API gateways / reverse proxies: NGINX, Apigee, Kong, etc.

Why OpenKyber? At OpenKyber, we believe in advancing lives and careers. When you join our team, you gain access to:

• Competitive compensation and benefits
• Opportunities for growth with global clients
• A supportive, inclusive culture that values innovation and people
• Exposure to cutting-edge technologies and projects

About Our Commitment OpenKyber is an equal opportunity employer. We value diversity and are committed to creating an inclusive environment for all employees. All qualified applicants will receive consideration for employment without regard to race, color, religion, gender, sexual orientation, gender identity, national origin, age, disability, or veteran status.

Interested? Apply Now! If this sounds like the right opportunity for you, please apply with your most recent resume.

For applications and inquiries, contact:View email address on us.fitly.work