We are seeking an experienced ForgeRock Architect to lead the design and deployment of secure, scalable identity services across large-scale banking platforms. This role requires deep expertise in the ForgeRock stack (AM, IDM, IG), CIAM, middleware integration, and regulatory-compliant authentication systems.

Key Responsibilities:

- Architect and deploy ForgeRock AM, IDM, and IG solutions for internal and external user access.

- Design multi-realm configurations to support B2B, B2C, and partner interactions within retail and commercial banking environments.

- Integrate IAM flows with middleware (Apache, Tomcat, WebSphere) to support high-volume financial applications.

- Implement CIAM capabilities including user registration, consent management, KYC verification, and adaptive authentication.

- Deliver federated access using OAuth2, SAML, OIDC with policies aligned to PCI-DSS, GDPR, FFIEC, and OSFI standards.

- Establish Zero Trust principles including least privilege, micro-segmentation, and behavioral access analytics.





- Secure APIs with identity tokens and scopes; integrate IAM into ESB and enterprise service layers.

- Implement monitoring and alerting by integrating IAM with Splunk and Dynatrace.

- Manage certificate infrastructure (key rotation, trust store, TLS configurations).

- Extend IAM services to cloud-native banking environments (Azure, GCP).

- Support DevSecOps with automated IAM testing, CI/CD integration, and secrets management.

Qualifications:

- ForgeRock Certified Identity or Access Specialist preferred.

- Robust experience designing IAM solutions for consumer banking portals and financial APIs.

- Expertise in ForgeRock AM, IDM, IG and authentication flows.

- Hands-on knowledge of CIAM, OAuth2, OIDC, SAML, KYC, and identity proofing services.

- Familiarity with Zero Trust models, fraud detection, and contextual access controls.

- Excellent problem-solving, communication, and stakeholder management skills.

📌 ForgeRock Architect (Toronto)
🏢 Recutify
📍 Toronto