Senior ForgeRock IAM Engineer

About the Role

FNRCO is seeking a Senior ForgeRock IAM Engineer to join their team in Riyadh, Saudi Arabia. This full-time position requires an experienced professional with 5-10 years of overall experience, focusing on Identity and Access Management (IAM) solutions, particularly within the ForgeRock suite.

Key Responsibilities

• Deliver end-to-end SSO, MFA, federation, and API protection using SAML , OAuth , and OIDC across enterprise and hybrid environments.
• Perform installation, configuration, customization, patching, and upgrades of ForgeRock AM, managing realms, authentication trees, nodes, sessions, and policies at scale.
• Engineer policies with RBAC/ABAC, conditional/risk-based access, and Zero Trust aligned controls, integrating with governance frameworks.
• Develop custom nodes, extensions, and automation using Java and scripting languages such as Bash, Python, and Groovy, with familiarity in Git workflows and CI/CD.
• Design and implement high availability/DR solutions, conduct performance tuning, capacity planning, monitoring, and incident response for AM in production.
• Manage federation and token management for B2E, B2C, and partner scenarios, including secure application onboarding and third-party integrations.
• Integrate with security stacks (SIEM/PAM), access review processes, and compliance frameworks to ensure audit readiness.
• Lead workstreams, mentor team members, manage stakeholders, and produce clear design and runbook documentation.

Required Qualifications and Experience

• 7-10+ years of total experience in IAM, with 4-6+ years of hands-on experience across ForgeRock AM and exposure to IDM, IG, and DS/OpenDJ in production environments. Experience in financial institutions is beneficial.
• Strong expertise in Directory Services for identity stores, replication, indexing, and schema in DS/OpenDJ, supporting AM sessions and authentication data.
• Experience with cloud/container technologies and gateway patterns (IG), as well as Java/Web Agents protecting microservices and APIs in hybrid deployments.
• Bachelor’s degree in Computer Science, Information Technology, or an equivalent field.
• ForgeRock certifications and relevant IAM/cloud security credentials are preferred.

Work Environment

This is a full-time position based in Riyadh, Saudi Arabia, offering an opportunity to work within a dynamic environment focused on advanced IAM solutions.