Join a leading cybersecurity team focused on safeguarding organizational assets and preventing cyberattacks. This role supports the critical modernization of enterprise authentication by migrating applications from legacy CA SiteMinder to contemporary solutions like Microsoft Entra ID or ForgeRock Access Management. Immerse yourself in a dynamic environment that champions security, vigilance, and resilience.

This position offers a unique opportunity to work on cutting-edge IAM technologies. You will play a key part in enhancing security postures and enabling new opportunities through effective cyber risk management. Learn more about our Cybersecurity practice and its impact.

Your core responsibilities will involve assessing current CA SiteMinder-protected applications, detailing their authentication and authorization configurations. You will meticulously plan and execute application migrations to Microsoft Entra ID or ForgeRock AM, ensuring minimal disruption. This includes configuring SAML 2.0, OIDC, OAuth 2.0, and header-based authentication.

You'll implement ForgeRock Identity Gateway (IG) to secure legacy web applications with modern authentication. Replacing SiteMinder web agents and configuring authentication journeys, access policies, and MFA will also be crucial. Integrating applications with Active Directory, LDAP, and enterprise identity providers is integral to the role. You will troubleshoot complex authentication and SSO issues and prepare comprehensive migration documentation and knowledge transfer materials.

We are seeking a candidate with 4–8 years of hands-on experience in IAM implementation or migration. Demonstrated expertise with CA SiteMinder components (Policy Server, Web Agents) is essential, alongside proficiency in Microsoft Entra ID Enterprise Applications and/or ForgeRock Access Management.

Experience migrating from SiteMinder to ForgeRock or Microsoft Entra ID is required. Familiarity with header-based authentication modernization via ForgeRock IG and working knowledge of legacy enterprise applications (Java, .NET, WebSphere, IIS) are important. Understanding Conditional Access and MFA in Microsoft Entra ID is beneficial. Experience with CI/CD, Docker, Kubernetes, or other IAM platforms like Ping Identity or Okta is a plus.

A Bachelor's degree in Computer Science, B.Tech, M.Tech, or a related field is required. Experience with ForgeRock Identity Gateway (IG) or similar reverse proxies, along with knowledge of SAML 2.0, OAuth 2.0, OIDC, JWT, LDAP, and SSL/TLS is necessary. Integration experience with Active Directory and Microsoft Entra ID, along with web server knowledge (Linux, Apache, IIS, Tomcat, NGINX), is expected. Proficiency in REST APIs, Postman, and basic scripting (Shell, PowerShell, Python, JavaScript) will further strengthen your application.