Senior ForgeRock IAM Engineer (m/f/d)

About the role We are looking for an experienced Senior ForgeRock IAM Engineer (m/f/d) to join Cognizant and help design, build and operate enterprise Identity & Access Management (IAM) solutions. In this senior hands-on role, you will work with ForgeRock Access Management (AM), Identity Management (IDM) and Directory Services (DS) to deliver secure authentication, authorisation, federation, SSO and identity lifecycle capabilities.

You will collaborate with security architects, application teams and DevOps specialists in an international environment. Your responsibilities Design, develop and enhance IAM solutions using ForgeRock AM, IDM and DS . Build authentication journeys, authorisation policies, SSO and adaptive authentication capabilities. Implement federation and modern identity standards including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) and JWT .

Develop IDM workflows, mappings, connectors and provisioning/deprovisioning processes. Build custom integrations and components using Java, JavaScript and/or Groovy . Integrate ForgeRock with directories, HR systems, databases, MFA providers, applications and cloud services. Configure and optimise LDAP/Directory Services , including replication, indexing and access controls. Support CI/CD, deployment automation and cloud/container-based environments.

Troubleshoot complex IAM issues and perform root-cause analysis across applications and infrastructure. Contribute to technical standards, documentation, code reviews and mentoring of junior engineers. What you bring 10+ years of overall IT experience , including substantial hands-on experience with ForgeRock and IAM implementations. Strong experience with ForgeRock AM and IDM , including authentication journeys, SSO, policies, provisioning and reconciliation.

Experience with ForgeRock DS/OpenDJ , LDAP, replication and performance optimisation. Hands-on knowledge of SAML 2.0, OAuth 2.0, OIDC, JWT and REST APIs . Strong Java development skills and experience with JavaScript and/or Groovy. Sound understanding of IAM, RBAC/ABAC, least privilege and Zero Trust principles . Experience with Git, Maven/Gradle and CI/CD tooling such as Jenkins, Azure DevOps or GitLab CI. Good understanding of application security, TLS/certificates, Linux and distributed environments.

Strong analytical, communication and stakeholder-management skills. Nice to have Experience with ForgeRock Identity Gateway (IG) and API security. Cloud IAM experience across Azure, AWS or Google Cloud . Experience with Docker, Kubernetes or OpenShift . Infrastructure-as-Code experience with Terraform or Ansible . Integration experience with MFA platforms and risk engines. Experience with monitoring platforms such as Splunk, ELK, Prometheus/Grafana, AppDynamics or Dynatrace .

Knowledge of SCIM and Identity Governance (IGA). Relevant ForgeRock, IAM or security certification . Degree in Computer Science, Engineering or a related discipline, or equivalent practical experience.