Senior Engineer, Identity and Access Management

Job Purpose

Application and Infrastructure Maintenance

• Administer, maintain, and support ForgeRock/Ping OpenIDM and OpenDS directory services in production and non-production environments.
• Monitor health, performance, and availability; perform tuning, capacity planning, replication, schema, indexing, and access-control administration.
• Perform upgrades, patching, configuration changes, troubleshooting, and high-availability or disaster-recovery maintenance.

Linux Administration

• Manage Linux-based servers hosting IAM applications and directory services.
• Perform operating-system troubleshooting, log analysis, performance diagnostics, system hardening, and security configuration.
• Coordinate with infrastructure teams on server provisioning, networking, and storage.

Scripting and Automation

• Develop scripts for routine operations, monitoring, reporting, provisioning, de-provisioning, reconciliation, bulk directory operations, migrations, and schema management.
• Maintain and improve CI/CD pipelines related to IAM configuration and deployments.

AI Adoption and Enablement

• Evaluate AI tools for IAM operations, security, automation, anomaly detection, access-pattern analysis, and automated remediation.
• Use AI coding and scripting assistants responsibly and contribute to guardrails for AI use in identity and security.

Collaboration and Support

• Integrate identity services with enterprise applications alongside security, application, and infrastructure teams.
• Maintain runbooks, architecture diagrams, technical documentation, and standard operating procedures.
• Participate in on-call rotation, provide P1/P2 escalation support, mentor junior team members, and contribute to IT projects.

Knowledge and Experience

• Bachelor's degree in Computer Science, Information Systems, or equivalent education, training, or work experience.
• 5+ years of Identity and Access Management or directory services engineering experience.
• Hands-on ForgeRock OpenIDM and/or OpenDS, or Ping Identity directory product experience.
• Strong Linux administration, Bash or Python scripting, LDAP, authentication, troubleshooting, and production IAM experience.
• Experience with multi-factor authentication solutions and familiarity with LDAP, Kerberos, SAML, and OAuth2/OIDC.

Preferred Knowledge and Experience

• Additional ForgeRock/Ping products, HashiCorp Vault, containerization, SCIM, cloud environments, hybrid identity architectures, and relevant certifications are preferred.
• Knowledge of legal and regulatory requirements, IAM frameworks, operating systems, storage, TCP/IP, network monitoring, compliance, and technology risk is preferred.