About the role
We are looking for an experienced Senior ForgeRock IAM Engineer (m/f/d) to join Cognizant and help design, build and operate enterprise Identity & Access Management (IAM) solutions.
In this senior hands-on role, you will work with ForgeRock Access Management (AM), Identity Management (IDM) and Directory Services (DS) to deliver secure authentication, authorisation, federation, SSO and identity lifecycle capabilities. You will collaborate with security architects, application teams and DevOps specialists in an international environment.
Your responsibilities
- Design, develop and enhance IAM solutions using ForgeRock AM, IDM and DS.
- Build authentication journeys, authorisation policies, SSO and adaptive authentication capabilities.
- Implement federation and modern identity standards including SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) and JWT.
- Develop IDM workflows, mappings, connectors and provisioning/deprovisioning processes.
- Build custom integrations and components using Java, JavaScript and/or Groovy.
- Integrate ForgeRock with directories, HR systems, databases, MFA providers, applications and cloud services.
- Configure and optimise LDAP/Directory Services, including replication, indexing and access controls.
- Support CI/CD, deployment automation and cloud/container-based environments.
- Troubleshoot complex IAM issues and perform root-cause analysis across applications and infrastructure.
- Contribute to technical standards, documentation, code reviews and mentoring of junior engineers.
What you bring
- 10+ years of overall IT experience, including substantial hands-on experience with ForgeRock and IAM implementations.
- Strong experience with ForgeRock AM and IDM, including authentication journeys, SSO, policies, provisioning and reconciliation.
- Experience with ForgeRock DS/OpenDJ, LDAP, replication and performance optimisation.
- Hands-on knowledge of SAML 2.0, OAuth 2.0, OIDC, JWT and REST APIs.
- Strong Java development skills and experience with JavaScript and/or Groovy.
- Sound understanding of IAM, RBAC/ABAC, least privilege and Zero Trust principles.
- Experience with Git, Maven/Gradle and CI/CD tooling such as Jenkins, Azure DevOps or GitLab CI.
- Good understanding of application security, TLS/certificates, Linux and distributed environments.
- Strong analytical, communication and stakeholder-management skills.
Nice to have
- Experience with ForgeRock Identity Gateway (IG) and API security.
- Cloud IAM experience across Azure, AWS or Google Cloud.
- Experience with Docker, Kubernetes or OpenShift.
- Infrastructure-as-Code experience with Terraform or Ansible.
- Integration experience with MFA platforms and risk engines.
- Experience with monitoring platforms such as Splunk, ELK, Prometheus/Grafana, AppDynamics or Dynatrace.
- Knowledge of SCIM and Identity Governance (IGA).
- Relevant ForgeRock, IAM or security certification.
- Degree in Computer Science, Engineering or a related discipline, or equivalent practical experience.
Things to know before you apply
- Work authorization: Cognizant will only consider applicants for this position who are legally authorized to work in Canada without requiring employer sponsorship, now or at any time in the future.
- Accommodations: If you have a disability that requires reasonable accommodation to search for a job opening or submit an application, please email [email protected] with your request and contact information.
- AI in hiring: We use artificial intelligence (AI) tools to help us screen and assess applications more efficiently. Our team performs additional human review and ultimately decides who moves forward in our hiring process.
- Open position: Unless otherwise stated, this job posting is for an open position on our team.
- Language proficiency: We ask that all candidates have basic English proficiency for company-wide communications purposes. For roles based in Quebec, professional English proficiency is required, as you’ll deliver services to and collaborate with stakeholders outside the province who may not speak French.
- Inclusion: Cognizant is an equal opportunity employer. Your application and candidacy will not be considered based on race, color, sex, religion, creed, sexual orientation, gender identity, national origin, disability, genetic information, pregnancy, veteran status or any other characteristic protected by federal, provincial or local laws.
About Cognizant
Cognizant (Nasdaq: CTSH) is an AI Builder and technology services provider, bridging the gap between AI investment and enterprise value by building full-stack AI solutions for our clients. Our deep industry, process and engineering expertise enables us to build an organization’s unique context into technology systems that amplify human potential, drive tangible outcomes and keep global enterprises ahead in a fast-changing world. See how at cognizant.ai or @cognizant.











