BackSr. ForgeRock IAM Engineer
@ CGI
Position Description:
- CGI has an immediate need for a Sr. IAM Engineer (ForgeRock) to join our financial services team in one of our selected CGI locations.
- Due to the current COVID-19 status, candidates will not be required to work within the physical work location at this time. When COVID-19 restrictions are lifted, they will be required to be located within the proximity of the assigned CGI location.
- Join a fast-paced agile team working on integrating ForgeRock security product with web-based Java Applications hosted on Cloud.
- The ideal candidate must have strong background in implementing ForgeRock's authorization modules for Role Based Access Control (RBAC)
Your future duties and responsibilities:
- Empower an efficient workforce, protect the organization, and achieve regulatory compliance.
- Integrate ForgeRock with other products e.g. Salesforce, Custom Endpoints, Active Directory (PING)
- Scripting with Groovy, JavaScript, Python etc to handle work in Identity Access Management
- Policy Management using ForgeRock for Role Based Access Control (RBAC)
- Support current implementation which includes heavy customization
- Implement identity management solutions involving user provisioning, enterprise directories, and web single sign-on using best practices and proven methods
- Deliver internal and customer-facing projects utilizing products within the ForgeRock Solutions
- Create customer-facing documentation including designs, requirements, and test plans
- Provide ongoing support to an existing customer base of 160k
- Work with the support team to define, design, implement, and maintain the tools necessary for providing support to our customer base. This includes applications, scripts, and/or tools used by the support team for gathering, diagnosing, or otherwise providing support of the customer's operating system and/or identity management applications and/or connected systems.
- Understanding of federation using SAML2 and OAuth2/OpenID Connect solutions
- Understanding of LDAP directory servers and their place in identity management solutions
- Working knowledge of ForgeRock development
- Working knowledge of a compiled programming language (Java development a plus)
- Working knowledge of HTML, CSS and JavaScript
- Ability to troubleshoot and identify complex software, hardware, and systems issues
- Extensive networking experience
- Building & deploying ForgeRock including the configuration of security polices utilizing Chains and Trees
- Working with ForgeRock OpenIDM on integrating the registration of commodity authenticators
- Working in Splunk for data gathering & reporting
- Developing documentation for transitioning between Engineering and Ops teams
- Experience with Entrust Identity Guard
Qualifications:
Required qualifications to be successful in this role:
- Seeking a strong Sr. ForgeRock engineer to enhance and improve the Identity Access Management.
- 6-8 years of relevant experience
- Deep industry experience working in Identity Access Management
- Good hands-on development and configuration experience in ForgeRock
- Good knowledge of directory servers and LDAP protocol technologies (Active Directory)
- Experience with operating system (Unix/Linux/Windows) commands, utilities & scripting
- Good understanding of TCP/IP and REST API
- Experience with infrastructure, network, database, or security troubleshooting & remediation
- Experience with scripting with Groovy, JavaScript, Python etc.
- Experience with DevOps tools as Jenkins, Bitbucket, Dockers, Ansible, Kubernetes, etc. is a plus
- Experience with cloud platforms such as AWS
- Experience with Agile (or Scaled Agile) engineering methodologies preferred
- Experience working with enterprise software solutions
- Experience building & deploying ForgeRock including the configuration of security polices utilizing Chains and Trees Experience working with ForgeRock OpenIDM on integrating the registration of commodity authenticators
- Experience working in Splunk for data gathering & reporting
- Developing documentation for transitioning between Engineering and Ops teams
- Experience with Entrust Identity Guard will be helpful.
EDUCATIONAL REQUIREMENTS
- Bachelor's degree in Computer Science, Information Systems or related field
Skills:
- Bitbucket
- JavaScript
- Jenkins
- Linux
- Unix
How to Apply:
Apply online at https://www.cgi.com/en/careers
Visit Site to Apply
Location: Remote
Date Posted: January 13, 2023
Application Deadline: April 13, 2023
Job Type: Full-time