Senior IAM Engineer

Sr. IAM Engineer is responsible for delivering technical solutions for Identity and Access Management (IAM) systems through developing new functionality and completing upgrades to keep current with industry standards. Create technical designs and implementation plans to support requirements provided by Delivery Mangers, IT Security, IAM Architect, and Product Owners. Collaborate with IT and business staff to troubleshoot bugs and performance issues, support infrastructure upgrades, analyze application metrics, and ensure solutions provide positive user experience.

Delivers Technical Solutions:

• Implements solutions on the Ping/ForgeRock platform, specifically the Access Management (PingAM), Identity Management (PingIDM), Identity Gateway (PingGateway), and Directory Services (PingDS) products.

• Creates units tests and other code-quality measures. Builds OIDC or SAML integrations for third-party applications.

• Supports IAM-related requests from other teams and business units across the organization

Supports Application Upgrades and Operational Maintenance:

• Supports Ping/ForgeRock platform upgrades (e.g., adopting new versions of products, migrating to cloud platform, etc.).

• Updates IAM systems to support broader organizational initiatives.

• Provides support for performance testing, critical business events, and resolution of customer issues.

Collaborates:

• Coordinates with other members of the team (QA, Product Owners, Project Manager) in our Scrum process.

• Provide guidance, design documentation, and technical documentation to assist other teams in adopting IAM solutions

Implements Process Improvements

• Identifies and implements solutions to increase efficiency in our software development process.

• Fosters a culture of continuous improvement and learning for team and individual processes.

• Stays apprised of industry trends and best practices to help inform the IAM program.

Required

• Bachelor's Degree or equivalent experience

• 2-4 years of related work experience

• Track record of success (3+ years) developing on the latest version of Ping/ForgeRock products, with AM and IDM or IG experience required.

• Complete a mix of new development/enhancements, scripting, installation, and maintenance of these products.

• 3+ years of experience building out customer-facing solutions using ForgeRock products, such as Single Sign-On integrations (OIDC/SAML), Two-Factor Authentication (2FA), Identity Management Journeys (account creation; password resets, etc.), or Role-Based Access Control (RBAC) systems.

• AM Journey development using Server-Side JavaScript. Authorizing IG requests with different credential types - SSO cookie, OAuth token, or custom headers.

• Strong understanding of CI/CD tools.

Preferred:

• Experience using DS and LDAP Servers.

• Experience working on the AWS platform.

• Experience with monitoring tools such as Splunk, New Relic, etc.

• Experience with code repository tools such as GitHub and/or Bitbucket.

• Experience with UNIX command line tools and scripting languages (e.g., bash, Python).

• Experience with AWS Authorizer/AWS IAM and integration with ForgeRock components.

• Experience with self-hosting, ForgeOps, and PingOne Advanced Identity Cloud platform.

• Experience with Groovy, Java, and Java scripting to support and enhance custom AAMC-specific IAM solutions developed.

Remote Work Eligibility

Compensation Grade Range

Multiple factors are taken into consideration to arrive at the final hourly rate/annual salary to be offered to the selected candidate. Factors may include, but are not limited to, the scope and responsibilities of the role, the selected candidate's work experience, education and training, as well as internal equity, market, and business considerations.

If a bachelor's degree is required, related work experience may be substituted in some positions. One year of college course work at an accredited institution is equivalent to one year of related work experience.

The Association of American Medical Colleges (AAMC) is an Equal Opportunity/Affirmative Action Employer. The AAMC is committed to the policy of an equal employment opportunity in recruitment, hiring, career advancement, and all other personnel practices. The AAMC will not discriminate on the basis of race, color, sex, national origin, religion, age, marital status, personal appearance, sexual orientation, gender identity or expression, family responsibilities, matriculation, political affiliation, genetic information, disability, past or current military service, or any other legally protected characteristic.

Please attach a resume as part of the application process. It is important that files DO NOT include periods ( . ) within the file name.

BROWSER REQUIREMENTS: Applications must be submitted using Chrome, Mozilla Firefox, Safari, orMicrosoft Edge.