{"id":75177,"title":"Senior ForgeRock IAM Engineer (m/f/d)","company":"Cognizant Technology Solutions GmbH","city":"München","region":"Bayern","location":"80807 München","work_model":"hybrid","employment_type":"full_time","employment":["full_time"],"visa":"not_mentioned","relocation":"not_mentioned","posted_at":"2026-11-03T00:00:00+00:00","tools":["IAM","SAML","OAuth","OpenID Connect","REST","Java","JavaScript","Groovy"],"seniority":"senior","years_experience_min":10,"german_requirement":"not_mentioned","german_level":"unspecified","english_requirement":"not_mentioned","english_level":"unspecified","team_language":"unknown","confidence":0.4,"method":"rules","language_badge":"Not stated","language_evidence":null,"requirements_snippet":"- **10+ years of overall IT experience**, including substantial hands-on experience with ForgeRock and IAM implementations. - Strong experience with **ForgeRock AM and IDM**, including authentication journeys, SSO, policies, …","url":"https://www.arbeitsagentur.de/jobsuche/jobdetail/10001-1003955388-S","source":"bundesagentur","description_text":"**About the role**\n\nWe are looking for an experienced **Senior ForgeRock IAM Engineer (m/f/d)** to join Cognizant and help design, build and operate enterprise Identity & Access Management (IAM) solutions.\n\nIn this senior hands-on role, you will work with **ForgeRock Access Management (AM), Identity Management (IDM) and Directory Services (DS)** to deliver secure authentication, authorisation, federation, SSO and identity lifecycle capabilities. You will collaborate with security architects, application teams and DevOps specialists in an international environment.\n\n**Your responsibilities**\n\n- Design, develop and enhance IAM solutions using **ForgeRock AM, IDM and DS**.\n- Build authentication journeys, authorisation policies, **SSO and adaptive authentication** capabilities.\n- Implement federation and modern identity standards including **SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) and JWT**.\n- Develop IDM workflows, mappings, connectors and provisioning/deprovisioning processes.\n- Build custom integrations and components using **Java, JavaScript and/or Groovy**.\n- Integrate ForgeRock with directories, HR systems, databases, MFA providers, applications and cloud services.\n- Configure and optimise **LDAP/Directory Services**, including replication, indexing and access controls.\n- Support CI/CD, deployment automation and cloud/container-based environments.\n- Troubleshoot complex IAM issues and perform root-cause analysis across applications and infrastructure.\n- Contribute to technical standards, documentation, code reviews and mentoring of junior engineers.\n\n**What you bring**\n\n- **10+ years of overall IT experience**, including substantial hands-on experience with ForgeRock and IAM implementations.\n- Strong experience with **ForgeRock AM and IDM**, including authentication journeys, SSO, policies, provisioning and reconciliation.\n- Experience with **ForgeRock DS/OpenDJ**, LDAP, replication and performance optimisation.\n- Hands-on knowledge of **SAML 2.0, OAuth 2.0, OIDC, JWT and REST APIs**.\n- Strong **Java** development skills and experience with JavaScript and/or Groovy.\n- Sound understanding of **IAM, RBAC/ABAC, least privilege and Zero Trust principles**.\n- Experience with **Git, Maven/Gradle and CI/CD** tooling such as Jenkins, Azure DevOps or GitLab CI.\n- Good understanding of application security, TLS/certificates, Linux and distributed environments.\n- Strong analytical, communication and stakeholder-management skills.\n\n**Nice to have**\n\n- Experience with **ForgeRock Identity Gateway (IG)** and API security.\n- Cloud IAM experience across **Azure, AWS or Google Cloud**.\n- Experience with **Docker, Kubernetes or OpenShift**.\n- Infrastructure-as-Code experience with **Terraform or Ansible**.\n- Integration experience with MFA platforms and risk engines.\n- Experience with monitoring platforms such as **Splunk, ELK, Prometheus/Grafana, AppDynamics or Dynatrace**.\n- Knowledge of **SCIM** and Identity Governance (IGA).\n- Relevant **ForgeRock, IAM or security certification**.\n- Degree in Computer Science, Engineering or a related discipline, or equivalent practical experience.","responsibilities_text":"We are looking for an experienced **Senior ForgeRock IAM Engineer (m/f/d)** to join Cognizant and help design, build and operate enterprise Identity & Access Management (IAM) solutions.\nIn this senior hands-on role, you will work with **ForgeRock Access Management (AM), Identity Management (IDM) and Directory Services (DS)** to deliver secure authentication, authorisation, federation, SSO and identity lifecycle capabilities. You will collaborate with security architects, application teams and DevOps specialists in an international environment.\n- Design, develop and enhance IAM solutions using **ForgeRock AM, IDM and DS**.\n- Build authentication journeys, authorisation policies, **SSO and adaptive authentication** capabilities.\n- Implement federation and modern identity standards including **SAML 2.0, OAuth 2.0, OpenID Connect (OIDC) and JWT**.\n- Develop IDM workflows, mappings, connectors and provisioning/deprovisioning processes.\n- Build custom integrations and components using **Java, JavaScript and/or Groovy**.\n- Integrate ForgeRock with directories, HR systems, databases, MFA providers, applications and cloud services.\n- Configure and optimise **LDAP/Directory Services**, including replication, indexing and access controls.\n- Support CI/CD, deployment automation and cloud/container-based environments.\n- Troubleshoot complex IAM issues and perform root-cause analysis across applications and infrastructure.\n- Contribute to technical standards, documentation, code reviews and mentoring of junior engineers.","requirements_text":"- **10+ years of overall IT experience**, including substantial hands-on experience with ForgeRock and IAM implementations.\n- Strong experience with **ForgeRock AM and IDM**, including authentication journeys, SSO, policies, provisioning and reconciliation.\n- Experience with **ForgeRock DS/OpenDJ**, LDAP, replication and performance optimisation.\n- Hands-on knowledge of **SAML 2.0, OAuth 2.0, OIDC, JWT and REST APIs**.\n- Strong **Java** development skills and experience with JavaScript and/or Groovy.\n- Sound understanding of **IAM, RBAC/ABAC, least privilege and Zero Trust principles**.\n- Experience with **Git, Maven/Gradle and CI/CD** tooling such as Jenkins, Azure DevOps or GitLab CI.\n- Good understanding of application security, TLS/certificates, Linux and distributed environments.\n- Strong analytical, communication and stakeholder-management skills.\n- Experience with **ForgeRock Identity Gateway (IG)** and API security.\n- Cloud IAM experience across **Azure, AWS or Google Cloud**.\n- Experience with **Docker, Kubernetes or OpenShift**.\n- Infrastructure-as-Code experience with **Terraform or Ansible**.\n- Integration experience with MFA platforms and risk engines.\n- Experience with monitoring platforms such as **Splunk, ELK, Prometheus/Grafana, AppDynamics or Dynatrace**.\n- Knowledge of **SCIM** and Identity Governance (IGA).\n- Relevant **ForgeRock, IAM or security certification**.\n- Degree in Computer Science, Engineering or a related discipline, or equivalent practical experience.","status":"open","duplicate_of":null,"first_seen":"2026-11-03T16:25:15.521284+00:00","responsibilities_summary":null,"requirements_summary":null,"all_tools":["IAM","SAML","OAuth","OpenID Connect","REST","Java","JavaScript","Groovy","Zero Trust","Git","CI/CD","Jenkins","Azure","Azure DevOps","GitLab CI","GitLab","Linux","AWS","Google Cloud","Docker","Kubernetes","OpenShift","Infrastructure as Code","Terraform","Ansible","Splunk","ELK Stack","Prometheus","Dynatrace"],"posting_language":"en","evidence":[],"years_experience_max":null,"mobility_evidence":[],"model_version":"rules-7","english_badge":"English not stated","company_id":null}