Skip to main content Skip to footer

Security Architect

Security Managed Services Team Lead/Consultant | Full time | Experience: 5-10 years
Job No. ATCI-5404471-S1976425 | Bengaluru | Required Skill: ForgeRock Identity Management
立即申请
Project Role : Security Architect
Project Role Description : Define the cloud security framework and architecture, ensuring it meets the business requirements and performance goals. Document the implementation of the cloud security controls and transition to cloud security-managed operations.
Must have skills : ForgeRock Identity Management
Good to have skills : ForgeRock Access Management
Minimum 5 year(s) of experience is required
Educational Qualification : 15 years full time education

Summary
As a Lead ForgeRock Engineer, you will serve as the Subject Matter Expert (SME) for our global Identity and Access Management platform. You will be responsible for the a high-level orchestration, and security governance of the ForgeRock stack (AM, IDM, DS, IG). You will bridge the gap between business requirements and technical execution, leading a team of junior and mid-level administrators

Key Responsibilities
1. Platform Administration & Health
Maintenance: Perform system upgrades, patches, and version migrations for PingAM, PingIDM, and PingDS.
Monitoring: Use tools like Splunk, ELK, or Prometheus to monitor system health, log rotation, and performance bottlenecks.
Directory Management: Manage LDAP schemas, indexes, and replication in Directory Services (DS) to ensure data consistency.

2. Identity Lifecycle & Integration
App Onboarding: Configure SAML 2.0, OIDC, and OAuth2 integrations to enable Single Sign-On (SSO) for new applications.
Provisioning: Build and manage reconciliation/sync jobs in IDM to automate user onboarding and offboarding from HR systems (like Workday) to Active Directory.
Policy Enforcement: Create and maintain authorization policies and Authentication Trees (Journeys) to enforce MFA and adaptive risk-based security.

3. Security & Compliance
Governance: Implement Role-Based Access Control (RBAC) and ensure the principle of least privilege is followed.
Auditing: Generate reports for compliance (SOX, GDPR, HIPAA) showing who has access to what and when.
Incident Response: Troubleshoot login failures, session timeouts, and synchronization errors.

4. Modern DevOps Tasks
Automation: Use Groovy or JavaScript to write custom scripts for authentication nodes or IDM triggers.
IaC: Manage environment configurations using Terraform or Ansible and deploy via CI/CD pipelines.where applicable).

5.Governance, Security & Mentorship
Compliance: Ensure the platform meets global standards (GDPR, SOX, HIPAA) through robust audit logging and automated access reviews.
Mentorship: Lead a team of 3 5 IAM engineers, providing code reviews, technical guidance, and certification support

Professional & Technical Skills
ForgeRock & CIAM :- Deep knowledge of AM (Access), IDM (Identity), DS (Directory), and IG (Gateway).
Identity & Security :-
1. OAuth 2.0
2. OpenID Connect (OIDC)
3. SAML 2.0
4. JWT, REST APIs
5. LDAP / directory services

Scripting :-
1. Java, JavaScript / Groovy (ForgeRock scripting)
2. API security patterns
3. Linux / Unix environments
4. CI/CD and DevSecOps exposure

Additional functional experience :-
1. ForgeRock Identity Gateway (IG)
2. Cloud platforms (AWS / Azure / GCP)
3. Docker, Kubernetes
4. ForgeRock or IAM certifications
5. Experience with CIAM migrations (Ping, Okta, custom IAM)

Additional Information:
1.Bachelors and above degree in Computer Science, Information Technology, MIS, Engineering / Bachelor or college degree in related field or equivalent work experience (Full time).
2.The candidate should have minimum 5 years of experience in ForgeRock Identity Management & overall 10+ years overall IT experience

Certifications
ForgeRock FRX-AM-CSE Certified
15 years full time education

Bengaluru

平等就业机会声明

所有聘用决定均不考虑年龄、种族、信仰、肤色、宗教、性别、国籍、血统、残疾状况、退伍军人身份、性取向、性别认同或表达、基因信息、婚姻状况、公民身份或任何其他受联邦、州或地方法律保护的因素。

求职者在招聘过程中没有义务披露已封存或已删除的定罪或逮捕记录。

埃森哲致力于为我们的男女军人提供退伍军人就业机会。

请阅读埃森哲的招聘和聘用声明,了解更多关于我们在招聘和聘用过程中如何处理您的数据的信息。

We work with one shared purpose: to deliver on the promise of technology and human ingenuity. Every day, more than 775,000 of us help our stakeholders continuously reinvent. Together, we drive positive change and deliver value to our clients, partners, shareholders, communities, and each other.

We believe that delivering value requires innovation, and innovation thrives in an inclusive and diverse environment. We actively foster a workplace free from bias, where everyone feels a sense of belonging and is respected and empowered to do their best work.

At Accenture, we see well-being holistically, supporting our people’s physical, mental, and financial health. We also provide opportunities to keep skills relevant through certifications, learning, and diverse work experiences. We’re proud to be consistently recognized as one of the World’s Best Workplaces™.

Join Accenture to work at the heart of change. Visit us at www.accenture.com.

埃森哲专业领域

网络安全职位:智胜威胁

利用您的专业知识和创业精神,帮助客户在复杂多变的威胁环境中构建具有安全性和复原力的业务,应对网络安全领域日益增长的职业需求。

了解更多