Identity and Access Management (IAM) Architect

Job Description

We are looking for an experienced IAM Architect with strong expertise in ForgeRock and PingOne AIC to join a large-scale enterprise project in Malaysia. The role involves designing, implementing, and supporting Identity and Access Management (IAM) solutions while working closely with business and technical stakeholders.

Mandatory Skills & Certifications

• ForgeRock / PingOne AIC
• ForgeRock Architect / SME

Key Responsibilities

• Design, build, configure, customize, implement, and support IAM solutions using ForgeRock components .
• Design and implement PingOne AIC authentication journeys using trees and nodes.
• Configure and customize authentication, authorization, and identity workflows.
• Work closely with business analysts to ensure IAM solutions meet security and compliance standards.
• Analyze identity-related business processes and map solutions to business requirements.
• Customize nodes and components using JavaScript, Java, and Groovy .
• Lead and support IAM stack migrations .
• Act as an IAM architect on large-scale enterprise projects .
• Design and lead identity lifecycle management initiatives.
• Communicate security risks and solutions effectively to business, platform, and product teams.
• Create, support, and maintain security policies, standards, processes, and documentation aligned with business goals.

Required Experience & Skills

• 9+ years of experience in IAM with hands-on architectural and implementation expertise.
• Deep understanding of authentication and access protocols including SAML, OAuth2, OIDC , and federation technologies.
• Strong experience with:
• OpenAM / PingAM
• OpenDJ / PingDS
• OpenIDM / PingIDM
• OpenIG / PingGateway
• Experience with PingOne Advanced Identity Cloud / ForgeRock Identity Cloud is an added advantage.
• Exposure to AppDynamics and Splunk for troubleshooting and monitoring.
• Advanced knowledge of IAM best practices, governance, and security policies.