Sr. ForgeRock IAM Engineer

Back

Sr. ForgeRock IAM Engineer

@ CGI

Position Description:

  • CGI has an immediate need for a Sr. IAM Engineer (ForgeRock) to join our financial services team in one of our selected CGI locations.
  • Due to the current COVID-19 status, candidates will not be required to work within the physical work location at this time. When COVID-19 restrictions are lifted, they will be required to be located within the proximity of the assigned CGI location.
  • Join a fast-paced agile team working on integrating ForgeRock security product with web-based Java Applications hosted on Cloud.
  • The ideal candidate must have strong background in implementing ForgeRock's authorization modules for Role Based Access Control (RBAC)


Your future duties and responsibilities:

  • Empower an efficient workforce, protect the organization, and achieve regulatory compliance.
  • Integrate ForgeRock with other products e.g. Salesforce, Custom Endpoints, Active Directory (PING)
  • Scripting with Groovy, JavaScript, Python etc to handle work in Identity Access Management
  • Policy Management using ForgeRock for Role Based Access Control (RBAC)
  • Support current implementation which includes heavy customization
  • Implement identity management solutions involving user provisioning, enterprise directories, and web single sign-on using best practices and proven methods
  • Deliver internal and customer-facing projects utilizing products within the ForgeRock Solutions
  • Create customer-facing documentation including designs, requirements, and test plans
  • Provide ongoing support to an existing customer base of 160k
  • Work with the support team to define, design, implement, and maintain the tools necessary for providing support to our customer base. This includes applications, scripts, and/or tools used by the support team for gathering, diagnosing, or otherwise providing support of the customer's operating system and/or identity management applications and/or connected systems.
  • Understanding of federation using SAML2 and OAuth2/OpenID Connect solutions
  • Understanding of LDAP directory servers and their place in identity management solutions
  • Working knowledge of ForgeRock development
  • Working knowledge of a compiled programming language (Java development a plus)
  • Working knowledge of HTML, CSS and JavaScript
  • Ability to troubleshoot and identify complex software, hardware, and systems issues
  • Extensive networking experience
  • Building & deploying ForgeRock including the configuration of security polices utilizing Chains and Trees
  • Working with ForgeRock OpenIDM on integrating the registration of commodity authenticators
  • Working in Splunk for data gathering & reporting
  • Developing documentation for transitioning between Engineering and Ops teams
  • Experience with Entrust Identity Guard


Qualifications:

Required qualifications to be successful in this role:

  • Seeking a strong Sr. ForgeRock engineer to enhance and improve the Identity Access Management.
  • 6-8 years of relevant experience
  • Deep industry experience working in Identity Access Management
  • Good hands-on development and configuration experience in ForgeRock
  • Good knowledge of directory servers and LDAP protocol technologies (Active Directory)
  • Experience with operating system (Unix/Linux/Windows) commands, utilities & scripting
  • Good understanding of TCP/IP and REST API
  • Experience with infrastructure, network, database, or security troubleshooting & remediation
  • Experience with scripting with Groovy, JavaScript, Python etc.
  • Experience with DevOps tools as Jenkins, Bitbucket, Dockers, Ansible, Kubernetes, etc. is a plus
  • Experience with cloud platforms such as AWS
  • Experience with Agile (or Scaled Agile) engineering methodologies preferred
  • Experience working with enterprise software solutions
  • Experience building & deploying ForgeRock including the configuration of security polices utilizing Chains and Trees Experience working with ForgeRock OpenIDM on integrating the registration of commodity authenticators
  • Experience working in Splunk for data gathering & reporting 
  • Developing documentation for transitioning between Engineering and Ops teams
  • Experience with Entrust Identity Guard will be helpful. 


EDUCATIONAL REQUIREMENTS

  • Bachelor's degree in Computer Science, Information Systems or related field


Skills:

  • Bitbucket
  • JavaScript
  • Jenkins
  • Linux
  • Unix


How to Apply:

Apply online at https://www.cgi.com/en/careers

Visit Site to Apply

Location: Remote
Date Posted: January 13, 2023
Application Deadline: April 13, 2023
Job Type: Full-time