Ensono
Senior IAM Engineer - ForgeRock
Remote - United States · Senior · Full-time
Stay score
odds of building a lasting career here
Sponsors, but it's cap-subject — you still face the weighted lottery (~45% per draw at Level III). Good if you win; have a cap-exempt backup on your list.
Lottery odds assume a STEM candidate.
Personalize to your clock →Employer immigration record
from this employer's Department of Labor filings
Files H-1B transfers
Sourced from Department of Labor LCA, PERM and prevailing-wage disclosure data. Employer matching is by name, so figures may be split across an employer's legal entities. Absence of a filing means none appears in our copy of the data, not that none exists.
Community outcomes
No reports yet — be the first to help the next applicant.
About the role
- Monitor platform health across the ForgeRock software suite including Access Management (AM), Identity Management (IDM), Directory Services (DS), and Identity Gateway (IG).
- Conduct root cause analysis on system failures, application performance drops, or certificate expirations, implementing permanent remediation steps.
- Oversee backup and disaster recovery protocols, verifying snapshot integrity for all identity data and configurations.
Responsibilities
- Manage system upgrades, critical security patches, and hotfix deployments with minimal disruption to business operations.
- Maintain directory integrations ensuring steady synchronization between ForgeRock components and connected enterprise systems like Active Directory, Azure AD/Entra ID, and HR systems.
- Optimize system capacity by tuning JVM, database connectors, and LDAP server performances to meet service level agreements (SLAs).
- Operational Support & Triage
- Provide L3 technical support to resolve complex identity federation, single sign-on (SSO), and authentication routing incidents.
- Maintain technical documentation including operational standard operating procedures (SOPs), runbooks, and environment architecture diagrams.
- Build custom authentication scripts and logic plugins utilizing Java, JavaScript, or Groovy to address advanced access use cases.
- Develop JSON-based route profiles within ForgeRock Identity Gateway to enforce policy controls for legacy applications and microservice APIs.
Requirements
- 6+ years of dedicated professional experience in Identity & Access Management (IAM), with at least 2+ years specialized in the ForgeRock ecosystem.
- Proven mastery of ForgeRock AM, IDM, DS, and IG components, configuration files, and.
- Proficiency writing production-grade scripts in Groovy, JavaScript, or Java.
Nice to have
- Certifications: ForgeRock Certified Access Management Specialist, Identity Management Specialist, or Ping Identity equivalent certifications.
- DevOps Skills: Hands-on familiarity using Git version control, Jenkins, Docker, or Kubernetes clusters.
- Whatever it means to you to do great things we want Ensono to be the place you can do it.
- Ensono is an Equal Opportunity/Affirmative Action employer.
- Pay transparency nondiscrimination statement/posting OFCCP's pay transparency policy can be found on OFCCP's website.
- ForgeRock Certified Access Management Specialist, Identity Management Specialist, or Ping Identity equivalent certifications.
Skills
- Unlimited Paid Days Off
- Three health plan options
- 401k with company match
- Eligibility for dental, vision, short and long-term disability, life and AD&D coverage, and flexible spending accounts
- Family Forming Benefit including fertility coverage and adoption/surrogacy reimbursement
- Paid childbearing and paternal leave
- Education Reimbursement, Student Loan Assistance or 529 College Funding
- Sabbatical leave
- Wellness program
- Flexible work schedule
- Hands-on familiarity using Git version control, Jenkins, Docker, or Kubernetes clusters.
- Ensono is a place to make better happen - for our clients and for your career.
Compensation
- As of the date of this posting, a good faith estimate of the current pay scale for this role is $125,000 to $162,000 annually based on a full-time schedule.
Company info
- About the role and what you'll be doing: We are seeking a skilled ForgeRock Senior IAM Engineer to oversee the day-to-day administration, operational maintenance, and custom expansion of our Identity and Access Management platform.
This listing is sourced directly from Ensono's careers page and normalized into a canonical job model.