IAM Consultant Forgerock

Role: Developer

Required Skills: Forgerock | IAM

Qualification: BACHELOR OF COMPUTER SCIENCE

Experience: 8 - 10 Years

Function: TECHNOLOGY

Apply By: 2027-01-09

The IAM Consultant / Delivery Lead will spearhead the Identity and Access Management (IAM) Multi-Factor Authentication (MFA) Hardening initiative. In this client-facing role, the consultant will drive technical and strategic discussions focused on migrating the enterprise to phishing-resistant MFA using Microsoft Entra ID and ForgeRock.

Must-Have Technical/Functional Skills

• Lead Consulting Experience: Demonstrated experience in cybersecurity consulting or IAM engineering, with a proven track record of leading client-facing engagements.
• Entra ID Expertise: Deep, hands-on experience hardening enterprise Microsoft Entra ID (formerly Azure AD) environments.
• Phishing-Resistant MFA Blueprinting: Proven experience deploying FIDO2 security keys, Windows Hello for Business (WHfB), or Certificate-Based Authentication (CBA) at scale across a large user base.
• Conditional Access Mastery: Advanced knowledge of building, testing, and troubleshooting complex Conditional Access architectures.

Roles & Responsibilities

• Client Leadership & Communication
• Lead and facilitate high-stakes client calls, workshops, and steering committee meetings to drive alignment on MFA hardening strategies.
• Translate complex Microsoft Entra ID technical architectures into clear, business-oriented risk-reduction outcomes for executive stakeholders.
• Manage client expectations, address concerns regarding user friction, and proactively resolve project roadblocks.
• Draft technical roadmaps, deployment playbooks, and change-management communication frameworks for the client.

Technical Execution & Architecture

• Drive the design, configuration, and rollout of phishing-resistant MFA methods within Microsoft Entra ID, including:
• FIDO2 security keys (for example, YubiKeys)
• Windows Hello for Business (WHfB)
• Microsoft Entra Certificate-Based Authentication (CBA)
• Application onboarding to Entra ID or ForgeRock using OIC, SAML, or a reverse-proxy approach.
• Drive delivery activities and guide the team on the strategic migration approach.
• Design and enforce strict Entra ID Conditional Access policies, including authentication strength, device compliance, and risk-based sign-in requirements.
• Orchestrate the decommissioning of legacy, phishable authentication methods, including SMS, voice, and standard Microsoft Authenticator push notifications without number matching.
• Evaluate and mitigate edge cases such as break-glass accounts, service accounts, and access from non-corporate devices.

Salary Range: $81,000 - $109,500 a year