About the role
We are looking for an experienced Senior ForgeRock IAM Engineer (m/f/d) to join Cognizant and help design, build and operate enterprise Identity & Access Management (IAM) solutions.
In this senior hands-on role, you will work with ForgeRock Access Management (AM), Identity Management (IDM) and Directory Services (DS) to deliver secure authentication, authorisation, federation, SSO and identity lifecycle capabilities. You will collaborate with security architects, application teams and DevOps specialists in an international environment.
Your responsibilities
- Design, develop and enhance IAM solutions using ForgeRock AM, IDM and DS.
- Build authentication journeys, authorisation policies, SSO and adaptive authentication capabilities.
- Implement federation and modern identity standards including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) and JWT.
- Develop IDM workflows, mappings, connectors and provisioning/deprovisioning processes.
- Build custom integrations and components using Java, JavaScript and/or Groovy.
- Integrate ForgeRock with directories, HR systems, databases, MFA providers, applications and cloud services.
- Configure and optimise LDAP/Directory Services, including replication, indexing and access controls.
- Support CI/CD, deployment automation and cloud/container-based environments.
- Troubleshoot complex IAM issues and perform root-cause analysis across applications and infrastructure.
- Contribute to technical standards, documentation, code reviews and mentoring of junior engineers.
What you bring
- 10+ years of overall IT experience, including substantial hands-on experience with ForgeRock and IAM implementations.
- Strong experience with ForgeRock AM and IDM, including authentication journeys, SSO, policies, provisioning and reconciliation.
- Experience with ForgeRock DS/OpenDJ, LDAP, replication and performance optimisation.
- Hands-on knowledge of SAML 2.0, OAuth 2.0, OIDC, JWT and REST APIs.
- Strong Java development skills and experience with JavaScript and/or Groovy.
- Sound understanding of IAM, RBAC/ABAC, least privilege and Zero Trust principles.
- Experience with Git, Maven/Gradle and CI/CD tooling such as Jenkins, Azure DevOps or GitLab CI.
- Good understanding of application security, TLS/certificates, Linux and distributed environments.
- Strong analytical, communication and stakeholder-management skills.
Nice to have
- Experience with ForgeRock Identity Gateway (IG) and API security.
- Cloud IAM experience across Azure, AWS or Google Cloud.
- Experience with Docker, Kubernetes or OpenShift.
- Infrastructure-as-Code experience with Terraform or Ansible.
- Integration experience with MFA platforms and risk engines.
- Experience with monitoring platforms such as Splunk, ELK, Prometheus/Grafana, AppDynamics or Dynatrace.
- Knowledge of SCIM and Identity Governance (IGA).
- Relevant ForgeRock, IAM or security certification.
- Degree in Computer Science, Engineering or a related discipline, or equivalent practical experience.
About Cognizant:
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.
Additional employment information
Compensation information is accurate as of the date of this posting. Cognizant reserves the right to modify this information at any time, subject to applicable law.
Applicants may be required to attend interviews in person or by video conference. In addition, candidates may be required to present their current state or government issued ID during each interview.
Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, state or local laws.










